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Independent Orbiter Assessment 
Analysis of the Auxiliary Power Unit 


1.0 EXECUTIVE SUMMARY 

The McDonnell Douglas Astronautics Company ( MDAC ) was selected in 
June 1986 to perform an Independent Orbiter Assessment . ( IOA) of 
the Failure Modes and Effects Analysis (FMEA) and Critical Items 
List (CIL). Direction was given by the STS Orbiter and GFE 
Projects Office to perform the hardware analysis using the 
instructions and ground rules defined in NSTS 22206 , Instructions 
for Preparation of FMEA and CIL , 10 October 1986. The IOA 
approach features a top-down analysis of the hardware to 
determine failure modes, criticality, and potential critical 
items. To preserve independence, this analysis was accomplished 
without reliance upon the results contained within the NASA 
FMEA /CIL documentation. This report documents (Appendix C) the 
independent analysis results corresponding to the Orbiter 
Auxiliary Power Unit (APU). 

The APUs are required to provide power to the Orbiter hydraulics 
systems during ascent and entry flight phases for aerosurface 
actuation, main engine gimballing, landing gear extension, and 
other vital functions. For analysis purposes, the APU system was 
broken down into ten functional subsystems. 

The IOA analysis process utilized available APU hardware drawings 
and schematics for defining hardware assemblies, components, and 
hardware items. Each level of hardware was evaluated and 
analyzed for possible failure modes and effects. Criticality was 
assigned based upon the severity of the effect for each failure 
mode . 

Figure 1 presents a summary of the failure criticalities for each 
of the ten analysis breakdown subsystems of the APU. A summary 
of the number of failure modes, by criticality, is also presented 
below with Hardware (HW) criticality first and Functional (F) 
criticality second. 
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I Summary of IOA Failure Modes By Criticality (HW/F) I 


Criticality : 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

Number : 

L 

37 

84 

- 

93 

1 

86 

301 
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For each failure mode identified, the criticality and redundancy 
screens were examined to identify critical items. A summary of 
Potential Critical Items (PCIs ) is presented as follows: 


Summary of IOA Potential Critical Items (HW/F) 


Criticality: 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

TOTAL 

Number : 

37 

84 

- 

27 

1 

149 


The preponderance of 1/1 items are failures that allow the APU 
hydrazine fuel to escape into the Orbiter aft compartment, 
creating a severe fire hazard, and failures that cause loss of 
the gas generator injector cooling system. 


2 . 0 INTRODUCTION 


2.1 Purpose 

The 51-L Challenger accident prompted the NASA to readdress 
safety policies, concepts, and rationale being used in the 
National Space Transportation System (NSTS). The NSTS Office has 
undertaken the task of reevaluating the FMEA/CIL for the Space 
Shuttle design. The MDAC is providing an independent assessment 
of the Orbiter FMEA/CIL for completeness and technical accuracy. 


2 . 2 Scope 

The scope of the independent FMEA/CIL assessment activity 
encompasses those Shuttle Orbiter subsystems and GF E hardware 
identified in the Space Shuttle Independent FMEA/CIL Assessment 
Contractor Statement of Work. Each subsystem analysis addresses 
hardware, functions, internal and external interfaces, and 
operational requirements for all mission phases . 


2.3 Analysis Approach 

The independent analysis approach is a top-down analysis 
utilizing as-built drawings to break down the respective 
subsystem into components and low-level hardware items . Each 
hardware item is evaluated for failure mode, effects, and 
criticality . These data are documented in the respective 
subsystem analysis report, and are used to assess the NASA and 
Prime Contractor FMEA/CIL reevaluation results. The IOA analysis 
approach is summarized in the following Steps 1.0 through 3.0. 
Step 4.0 summarizes the assessment of the NASA and Prime 
Contractor FMEAs/CILs that is performed and documented at a later 
date . 


Step 1.0 Subsystem Familiarization 

1.1 Define subsystem functions 

1.2 Define subsystem components 

1.3 Define subsystem specific ground rules and 
assumptions 

Step 2.0 Define subsystem analysis diagram 

2.1 Define subsystem 

2.2 Define major assemblies 

2.3 Develop detailed subsystem representations 

Step 3.0 Failure events definition 

3.1 Construct matrix of failure modes 

3.2 Document IOA analysis results 
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Step 4.0 Compare IOA analysis data to NASA FMEA/CIL 

4.1 Resolve differences 

4.2 Review in-house 

4.3 Document assessment issues 

4.4 Forward findings to Project Manager 


2.4 APU Ground Rules and Assumptions 

The APU ground rules and assumptions used in the IOA are defined 
in Appendix B. 

Due to resource and schedule constraints and lack of adequate 
data, the Controller analysis was done to a functional level 
only; the criticalities of failures in key controller functions 
were assessed. This matches the analysis level of the NASA 
FMEA/CIL . 

The APU gas generator injector cooling system and fuel pump/GGVM 
cooling system failure criticalities were assigned based on a 
sudden deorbit with hot APUs, which is the flight situation in 
which these systems are of critical importance. It was assumed 
that a worst case ATO would produce the same situation, as well. 
This produced several l/l criticalities due to the lack of 
redundancy in the gas generator injector cooling system. 


5 



3.0 SUBSYSTEM DESCRIPTION 


3.1 Design and Function 

The Auxiliary Power Unit (APU) subsystem converts chemical 
energy stored in liquid hydrazine to mechanical shaft 
power. The Orbiter has three completely independent APUs, 
with each APU driving one hydraulic pump. 

Each APU subsystem consists of the following: 

o A fuel supply and distribution system 
o An auxiliary power unit and controller 
o An exhaust duct assembly - 
o A fuel thermal control system 
o A fuel pump seal cavity drain line 
o A fuel pump/valve module cooling system 

o A gas generator injector cooling system 

The hydrazine is delivered to the APU gas generator via the 
fuel pump. The catalyst in the gas generator causes the 
hydrazine to decompose. The hot gases make two passes 
through the turbine, which in turn provides mechanical power 
to the APU gearbox. Through gear reduction, power is 
provided to drive the APU fuel pump, lube oil pump, and 
hydraulic oil pump. 

Three water tanks and associated lines are provided to cool 
the fuel pumps and gas generator valve modules after APU 
shutdown on-orbit and to cool the gas generator injectors 
should an emergency hot start be required. 

The hydrazine fuel supply is stored in the fuel tank and is 
pressurized with nitrogen during servicing. The pressure 
provides start capability until the fuel pump is running and 
acts against the tank diaphragm to positively expel fuel to 
the APU. The fuel pump provides a constant flow of 
hydrazine to the valve module after the initial bootstrap 
start . 

Two parallel fuel isolation valves are manually actuated by 
the crew during APU activation and deactivation. During 
nonoperating periods, they isolate the fuel supply to 
prevent further fuel flow. Each valve has a reverse- flow 
pressure-relief feature to prevent system damage due to 
expansion of fuel trapped between the valves and the APU. 

The APU turbine speed is controlled by the Gas Generator 
Valve Module (GGVM). The valve module consists of two 
flapper-type valves in series. The primary or modulating 
valve downstream of the pump is normally open and allows 
flow to the secondary or shutoff valve. The secondary valve 
is normally in by-pass, which directs hydrazine flow back to 
the pump inlet. In the powered state, it allows hydrazine 
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flow to the gas generator. The APU controller cycles these 
valves to maintain proper turbine speed. The gas generator 
is a container for a granular catalyst, when hydrazine 
comes in contact with the catalyst, decomposition occurs, 
and the hot gases produced are directed to the turbine. 

The dual-pass turbine assembly converts hot gas kinetic 
energy into mechanical shaft power at the desired speeds to 
operate the hydraulic pump, lube oil pump, and fuel pump. 

The speed-reducing gearbox contains gears, bearings, seals, 
and a scavenger lubrication system. The gearbox is 
pressurized with nitrogen to prevent vaporization of the 
lubricant. A lube oil pump circulates the lube oil to the 
hydraulic water boiler for cooling. The gearbox has a 
pressurization system consisting of a small GN2 bottle and 
solenoid shutoff valve actuated by the controller. 

The APU controller provides speed control, logic for APU 
startup and shutdown, signal conditioning, heater control, 
gearbox pressure control, and malfunction detection 
capability. 

The exhaust duct assembly directs the APU exhaust products 
overboard through an exit at the upper aft fuselage skin. 
Exhaust duct assemblies 1 and 2 are located on the port side 
and duct 3 is on the starboard side of the aft fuselage at 
the base of the vertical stabilizer. 

The fuel tank, fuel line, fuel pump, and lube oil line 
heaters are sized to maintain the fuel and lube oil above 
minimum temperature during any Orbiter mission. The gas 
generator heaters provide a means of preheating the catalyst 
to > 190 degrees F for controlled decomposition. 

Insulation for the APU prevents excessive temperatures in 
the fuel system as a result of entry heating. 

The fuel pump and gas generator valve modules are maintained 
below 200 degrees F after APU shutdown by a water spray 
system consisting of two water tanks and associated lines, 
switches, thermostats, and timers. This system is only 
required on-orbit when convective cooling is insufficient to 
cool these components . 

A single water tank with lines to all three APUs is provided 
to cool the gas generator injector should an APU restart be 
required before the gas generator can cool naturally. 

Control is via the APU controller. 


7 


3.2 Interfaces and Locations 


Figure 2 depicts the APU interfaces. The APU and APU 
C o ntroller receive el ectric power from vario us Orbiter Aft 
Load Controllers, Aft Power Controllers , Control Buses , and 
Essential Buses. APU gauges are powered by Panel Bus Main B 
015. 

All three APUs are mounted on the 1307 bulkhead, „in the 
Orbiter aft compartment. APU's 1 and 2 are located in close 
prox im ity toward th e p ort side of the bulkhe ad. APU 3 is 
slightly further away, toward the starboard side. 

The APU fuel tanks are mounted on the sides of the aft 
compartment, about 7 feet aft of the 1307 bulkhead. Tanks 
1 and 2 are on the port side, in close proximity. Tank 3 is 
on the starboard side. Figure 3 shows the locations of the 
three APUs and associated fuel tanks, fuel lines, and the 
lube oil lines. 

APU lube oil cooling is provided by the Orbiter Water Spray 
Boilers, one for each APU. 

The Controllers for APU 1, 2 and 3 are mounted on freon 
coldplates in Aft Avionics Bays 4, 5 and 6, respectively. 

The APUs are controlled during flight by flight crew 
switches only - no uplink commands are possible. Many APU 
functions can be controlled from the ground prelaunch by way 
of the Launch Aft MDM, however. 


3 . 3 Functional Breakdown 

For analysis purposes, the APU was broken down into the 

following functional subsystems: 

1. Power System 

2. Fuel System 

3 . Lube Oil System 

4. Gas Generator Injector Cooling System 

5. Fuel Pump/GGVM Cooling System 

6 . Structure 

7. Electrical System 

8. Displays 

9. Instrumentation 

10. Controller 

These subsystems are described below. 

1. The Power System consists of the components involved in 
generating shaft power from the exothermic reaction - 
the gas generator, turbine wheel, exhaust duct, 
gearbox, gas generator bed heaters, and the turbine 
speed sensors. 
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Figure 3 


- APU LOCATION 
10 


0RIGIA(A£. page is 
0F POOR QUALfTY 






N|>NZ>>C_N> 
TINNNT)>ZN 
rsj N N N N > Z 

NIN 
Nl 


NNNN>N>J>> 
>NNNINCNC 
X N -0 X X X 

Nl 
N) 


73 

> 

O 

m 


73 

> 

Z 


r* 

■n 

> 

r~ 

2 

m 

c 

z 

> 

> 

< Z 

> 

z 

HH 

m 

n 

r~ 

0 

Z 

r~ 

H 

-< 

1— 1 



t— ( 

CO 

z 

m 

O 

O 

•— » 

CD 

Z 

ti 

Z CO 


CD 


> 


CD 

•— < 

X 0 

73 

m 

Z 

> 


C 

> 

m 

73 

00 

73 

73 


OCT3 


CD 

s; cn 0 

m 

►H 

> 

co 

CO x 

2 

73 

-< 

m 

— 1 

Ol 

m 

l/l 

CO 

m 

> 


—t 


Z 

1” 


m 


co 

1“ 


2 


1— 1 

1 — i 


CO 


0 

Z 




z 

CD 


>O73Z'0TH>n‘nH>H 

t/) 73 m>O>O* 07 )>ZCZ 
nCHTIt/HHTIT)HHOXD 
mHO>mr i 73 h r m h m 
Z H 7 J ZCOO^CTJrTJ 
HnnT!H7]0>n73mHm 

73 s*-im€:o>mz>Z 

> Om> ZXr 0730 

Z > O > r“ 2 2 m 

OCO\ D>-ni^OZ Z 
XCOOOZrn— IO— IT3H 
mH2H7:n>>mrn o 
zomr^inrHSt/ioco 
— ( > — < z — I < C (/l 73 m 73 

7 > H O h t/1 73 >007303 

-<7)1/300 *— • m r- Z *-• 

-C 0> t/1 00 h O H C H 

ti i-ici - t/> m zm 


r 73 z 2 

H m 73 

73 

KH O 

O m *— • 

~n 

— 1 

cd s: 

m z H 

“n > 

> 

x m 

X H m 

m co 

CO 

H 73 

m > 2 

0 co 

co 


Z H co 

-H m 

m 

7) c 

D »-» 

co co 

co 

x z 

m 0 

co 

co 

> HH 

Z Z 

> 2 

2 

CO -I 

— ( 

Z m 

m 

m 


> z 

Z 

co 

> 

r h 

— 1 


z 

< 


~n 

> 

co 


O 

r 

w 


73 

•< 

co 



00 

> *-< 

m c/) 

73 

O 

co 

C 

73 


> 

O 

m 




-h 

a 

X 

X 

X 

to 

CD 

CD 


rf 

0 

3 

0 

rf 



H 

0 

0 

H 

3 

0 

X 



X 

CD 

0 

< 

CD 

X 

CD 

-h 

X 

to 

X 

X 

0 

X 

X 

/ — - 

n 

X 

0 

O 

0 

0 

X 

X 

T| 


u. 


3 

a 

— ■ 

CD 

< 

-h 

a 

c 

0 

a 

-»• 

rf 

0 

> 

0 

-i- 

X 

0 


a 

0 

0 

2 


CD 

— 

“0 

X 

CD 

X 

CD 

CD 


u 



X 

X 


73 

X 

to 

rf 

O 

X 

0 

— • 

(0 

m 


O 

C 

CD 

CD 

rf 

0 

X 

0 

CD 

(0 

> 

0 


< 

0 

c 

X 


0 

3 

X 

to 

< 

0 

> 


r+ 

“3 

“3 

N 

CD 

X 

- 1 . 

rf 

X 

K 

73 

rf 

0 


X 

w 

0 

X 


X 

0 

* 

CO 

X 



0 

CD 

rf 

_ 1. 

a 

a 

rf 

to 

CD 

to 

C 

X 

X 

-h 

X 


(0 

0 

X 

— * 

to 


->■ 

rf 



"3 

to 

3 

X 


CD 

< 


— > 

rf 


0 

(D 

— ■ 



X 

X 

0 

-*■ 

0 

0 

(0 

0 

0 




(D 

CD 

r+ 

X 



< 

0 

to 

X 

— <■ 


rf 

H 

0 

0 

a 

(0 

X 

X 


a 

X 


0 

rf 

3 


0 

CD 

0 

O 

N 

3 

< 


X 

to 

0 

X 

X 

X 


X 

< 

->■ 

0 


a 


O 

X 

rf 

*+> 


X 

-h 

X 

0 

CO 

CO 

< 

0 

X 

X 

0 

a 

rf 

£ 

0 

0 

rf 

-h 




O 

CD 

•> 

C 


0 


-j. 

a 


rf 



rf 





— *■ 

a 




— 1 

0 



r+ 


CD 

CD 

CD 

rf 

r+ 



0 

rf 

to 


X 

> 

X 

a 

rf 


-i. 

O 

rf 

X 

X 




n 

— ■ 



X 


~h 

m 

3 

CD 


X 

< 

73 

(Q 

0 

X 

£ 

X 

0 

X 

0 

-** 


X 

0 

"3 


— • 

0 

CD 

0 

0 

CD 


— > 

3 

X 

a 

C 


o 

-*• 

— <• 

a 

— 1 

0 


rf 


<Q 

CD 

CD 

r+ 

C 

Ti 


CD 

X 

0 

£ 


X 

0 

X 

to 

rf 

c 

X 

rf 

0 

— *■ 


HH 

— »■ 



c 

CD 

0 

X 


CD 

— > 


X 

CD 

-h 

0 

to 

c 


0 

3 


X 

X 

rf 

X 

O 

0 


(0 

cn 

rf 


CD 

_L 

-h 

— 1. 

X 


CO 

C 

— 1 

0 

0 

0 


0 

rf 

0 

0 

< 

0 

> 

0 


< 

CD 


CD 

to 

\ 

-h 

rf 

0 

— • 


X 

— < 

CO 

— < 

X 

rf 

X 

X 

c 

X 

- 

X 


— * 


to 

a 

X 

to 


_ L 

CD 

< 

CO 

0 

X 

n 

-<■ 


-r- 

0 

X 

rf 

0 

rf 

a 


a 

0 



Hf 


ID 

0 

rf 


0 


CO 

< 

X 

rf 

X 

-b 

0 


0 

CO 



0 

0 

£ 

X 

v—( 


CD 

— > 


CD 

X 

n 

rf 

£ 


0 

0 

-** 

to 

0 

to 

X 



z 

X 

X 

X 

0 

X 

rf 


3 

0 

CD 

X 

CD 

X 


ID 

a 

— > 

*■ 

0 

- 

X 


0 

O 


> 

0 

0 

a 

X 

X 

0 

73 


to 


CD 

rf 


"h 

to 

— 1 


0 

X 



(0 

XI 

X 

X 

00 

— > 

0 


0 

0 

3 

X 


CO 

to 



rf 

0 


0 

0 

X 

(0 

— < 

0 

< 

c 

X 

a 

> 


- 

X 


0 

to 

73 



CD 


CD 

_<• 

X 

CD 


-h 



0 

0 

to 


— <■ 

0 


0 


0 

rf 

n 


> 


0 

< 

X 

— 1 

0 


to 

-*> 


a 


X 

X 

rf 

X 

rf 

X 

T| 

X 

rf 

r+ 

0 

X 

r 

CO 


-h 

CD 

rf 

— < 

CD 

CD 

to 

CD 

X 

0 

TI 

a 

0 

0 

0 

0 

0 

2 

0 

X 

0 




m 



X 

0 

0 


CD 



CD 

£ 

0 


to 

3 

a 

X 

X 

m 

0 


X 

a 

-h 

to 



rf 

CD 


£ 


0 

ID 

— ■ 

X 

X 

X 

X 

c 

to 



a 

> 


CO 

rf 

0 

0 

rf 



X 


r+ 

CD 

rf 

X 

X 

C 

a 



(0 

X 


rf 

> 

0 

s 

c 



rf 

0 




CD 

-fi 

X 

a 

< 


0 

X 

£ 


CD 


-h 

a 

0 

c 

X 

0 

X 

0 

0 

0 

rf 





-i. 

CD 



-h 

a 

0 

CD 

X 

X 

(0 

0 

c 


X 

rf 

1— 1 

0 

X 

— * 

X 

c 

O 



ID 

X 


rf 


CD 



X 

rf 

ID 

0 

0 

X 

V 



X 

X 

0 


3 

X 

»— 1 



CD 

CD 

O 

X 

rf 


X 

3 

0 

0 

— < 

0 

0 


X 

— 1 

0 



— * 

0 

-«■ 

0 

1” 



to 


X 

CD 

CD 

— > 

ID 

0 



< 

X 


X 

0 

— <■ 

X 

a 

rf 

< 

X 

X 

CO 

w 




X 

X 


3 

c 

CO 

a 

£ 

rf 

to 


0 

(0 

< 

0 

0 

0 

X 

(0 

->■ 

0 





ID 

CD 

_l- 

> 

cn 

X 

0 

0 

CD 

0 

-1. 

0 

0 


_<■ 

X 

— < 

n 

0 


rf 


0 

0 



CD 

N 

rf 

73 


<D 

a 

£0 

CO 

X 

to 

X 

rf 

0 

a 

< 

< 

c 


(0 


-h 


X 



X 

CD 

CD 

C 

£ 







rf 

c 

to 

0 


(0 

3 

X 


0 

0 

rf 

0 



(D 

X 

X 


0 

3 

c 

ID 

0 

-h 

X 

0 

0 

n 


73 


0 

0 

£ 

0 

— >■ 

0 




“3 

a 



X 

0 

x 

X 

< 

c 

C 

X 

rf 

0 

X 

0 

to 

X 

to 

0 

— < 

— • 

X 




0) 


ID 


CD 

a 

0 

a 

CD 

X 

X 

to 


X 

0 

£ 


rf 

c 

(0 


C 

1 




r+ 


-ti 



0 

X 


— > 

n 

X 


0 

rf 

£ 

0 

X 

0 

— < 


— i- 

X 

a 




0 

CD 

rf 






c 

rf 

0 

0 

X 


0 

X 

0 

rf 

rf 


rf 

0 

0 




x 

X 





rf 


CD 


to 

X 

- 

0 

X 


to 

->■ 

to 


0 


£ 





a 




> 

X 


rf 

0 

0 

- 


X 


C 

c 

0 



3 


X 










0 


0 

X 

to 



a 

rf 

X 

— 1 

3 



to 














a 

CD 

• 




0 

->• 

rf 



















— ■ 






rf 

cn 









* 

* 

* 

* 

* 

* 

* 

* 

# 

* 

# 


> 

o 

H 

C 

> 

-l 


O 

z 


ABSTRACT = The results of the Independent Orbiter Assessme 
(IOA) of the Failure Modes and Effects Analysis 
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IPS MACHINE AIDED INDEXING 


— 

2 . 

The Fuel System consists of all components involved in 
storing fuel, and supplying it to the gas generator - 
the fuel tank, fuel lines, valves, fuel pump, and 
heaters. 

— 

3 . 

The Lube Oil System includes the lube oil lines, pump, 
couplings, accumulators, and heaters. 

— 

4 . 

The Gas Generator Injector Cooling System includes all 
valves, water tanks, water lines, couplings, and 
heaters associated with this cooling system. 


5. 

The Fuel Pump/GGVM Cooling System includes all valves, 
water tanks, water lines, nitrogen lines, couplings, 
and heaters associated with this cooling system. 


6. 

The Structures analyzed include the APU turbine and 
gearbox housings. 

— 

7 . 

The Electrical System includes circuitry specifically 
associated with the APU, including the APU switches. 


8. 

Displays include all APU gauges and talkbacks. 


9. 

Instrumentation includes all APU transducers except 
for the turbine speed sensors, which are covered under 
the Power System. 

— 

10 . 

The APU Controller was analyzed to the functional level 
only. The analysis examines the consequences of loss 
of the Controller's important functions. 


Figure 4 presents a highly simplified breakdown of the APU 
components, reflecting the functional subsystems described 
above (except for the structures, electrical, displays, and 
instrumentation subsystems). 

Figure 5 presents the top-level hierarchy used in the APU 
analysis . 

Figures 6 through 15 present the breakdown hierarchy of the 
ten APU subsystems described on Page 9. 
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GAS GENERATOR INJECTOR COOLING SYSTEM HIERARCHY 
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4.0 ANALYSIS RESULTS 


Detailed analysis results for each of the identified failure 
modes are presented in Appendix C. Table I presents a summary of 
the failure criticalities. Further discussion of each of these 
subdivisions and the applicable failure modes is provided in 
subsequent paragraphs. 


+ + 

I TABLE I Summary of IOA Failure Modes and Criticalities [ 


Criticality : 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

3/3 

TOTAL 

Power System 

4 

4 

- 

5 

— 

2 

15 

Fuel System 

20 

22 

- 

20 

1 

9 

72 

Lube Oil 

1 

16 

- 

11 

- 

9 

37 

System 








GG Injector 

7 

5 

- 

4 

- 

6 

22 

Cooling 








Fuel Pump/ 

- 

13 

- 

12 

- 

5 

30 

GGVM Cooling 








Structures 

1 

3 

- 

- 

- 

— 

4 

Electrical 

3 

14 

- 

30 

- 

37 

84 

System 








Displays 

j 

- 

- 

- 

- 

10 

10 

Instrumen- 

tation 



— 

4 

— 

1 

5 

Controller 

1 

7 

- 

7 

- 

7 

22 

TOTAL 

37 

84 

- 

93 

1 

86 

301 


Of the 301 failure modes analyzed, 37 were determined to result 

in loss of crew or vehicle, and 84 created a situation where one 

additional failure would result in loss of crew or vehicle. A 

summary of the potential critical items is presented in Table II . 

Appendix D presents a cross reference between each Potential 
Critical Item (PCI) and a specific worksheet in Appendix C. 
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+ - - - - - + 

TABLE II Summary of IOA Potential Critical Items j 


Criticality : 

1/1 

2/1R 

2/2 

3/1R 

3/2R 

TOTAL 

Power System 

4 

4 

_ 


_ 

8 

Fuel System 

20 

22 

- 

3 

1 

46 

Lube Oil 

1 

16 

- 

3 

— 

20 

System 







GG Injector 

7 

5 

- 

- 

— 

12 

Cooling 







Fuel Pump/ 

- 

13 

- 

- 

- 

13 

GGVM Cooling 







Structures 

1 

3 

— 

_ 

_ 

4 

Electrical 

3 

14 

— 

17 


34 

System 







Displays 

i 

- 

- 

- 

- 

— 

Instrumen- 

- 

- 

— 

2 

— 

2 

tation 







Controller 

1 

7 

- 

2 

- 

10 

TOTAL 

37 

84 

- 

27 

1 

149 

+ 


4.1 Analysis Results - Power System 

The power system analysis identified 15 failure modes, of which 
4 were determined to be of criticality l/l, and 4 to be of 
criticality 2/1R. Eight PCIs were identified. 


4.2 Analysis Results - Fuel System 

The fuel system analysis id ntified 72 failure modes, of which 
20 were determined to be of criticality 1/1. This high number of 
l/l failure modes is due mainly to the fact that all APU fuel 
leaks into the Orbiter aft compartment are considered to be 
criticality 1/1. Forty-six PCIs were identified. 


4.3 Analysis Results - Lube Oil System 

The lube oil system analysis identified 37 failure modes, of 
which the largest number were determined to be criticality 2/1R 
or 3/1R . Only one failure mode was determined to be criticality 
1/1. Twenty PCIs were identified. 


25 


4.4 Analysis Results - Gas Generator Injector Cooling System 

The gas generator injector cooling system analysis identified 22 
failure modes, seven of which were determined to be of 
criticality 1/1. The high number of l/l failure modes stems from 
the lack of redundancy in this cooling system. Twelve PCIs were 
identified. 


4.5 Analysis Results - Fuel Pump/GGVM Cooling System 

The fuel pump/GGVM cooling system analysis identified 30 failure 
modes, none of which were identified to be of criticality 1/1. 
Thirteen were determined to be of criticality 2/1R. Thirteen 
PCIs were identified. 


4.6 Analysis Results - Structure 

The APU structure analysis identified four failure modes for the 
APU turbine and gearbox housings. Of these 4, 1 was determined 
to be criticality 1/1, and the rest 2/1R. Four PCIs were 
identified . 


4.7 Analysis Results - Electrical System 

The electrical system analysis identified 84 failure modes. The 
greatest number were determined to be criticality 3/3 or 3/1R, 
but three l/l failures were identified, and several 2/1R failures 
were also identified. Thirty-four PCIs were identified. 


4.8 Analysis Results - Displays 

Ten failure modes were identified for the APU displays. All were 
determined to be criticality 3/3. No PCIs were identified. 

4.9 Analysis Results - Instrumentation 


In the instrumentation system, four failure modes were determined 
to be criticality 3/1R. All other failure modes were determined 
to be 3/3, and were lumped together into one failure report. Two 
PCIs were identified. 


4.10 Analysis Results - Controller 

The APU controller functions were analyzed, and 22 failure modes 
were identified. One of these was determined to be criticality 
1/1, and several were determined to be 2/1R and 3/1R. The l/l 
criticality failure mode is one that eliminates the hot restart 
capability for all three APUs. Ten PCIs were identified. 
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APPENDIX A 
ACRONYMS 


AOA 

- 

Abort Once Around 

APU 

- 

Auxiliary Power Unit 

ATO 

- 

Abort to Orbit 

CIL 

- 

Critical Items List 

CRT 

- 

Cathode Ray Tube 

EGT 

- 

Exhaust Gas Temperature 

F 

- 

Fahrenheit, Functional 

FM 

- 

Failure Mode 

FMEA 

- 

Failure Mode and Effects Analysis 

GFE 

- 

Government Furnished Equipment 

GG 

- 

Gas Generator 

GGVM 

- 

Gas Generator Valve Module 

GN2 

- 

Gaseous Nitrogen 

HW 

- 

Hardware 

IOA 

- 

Independent Orbiter Assessment 

LCA 

- 

Load Control Assembly 

MDAC 

- 

McDonnell Douglas Astronautics Company 

MDM 

- 

Multiplexer /Demultiplexer 

N2 

- 

Nitrogen 

NASA 

- 

National Aeronautics and Space Administration 

NH3 

- 

Ammonia 

NSTS 

- 

National Space Transportation System 

PCI 

- 

Potential Critical Item 

psia 

- 

Pounds Per Square Inch, Absolute 

RTLS 

- 

Return to Launch Site 

STS 

- 

Space Transportation System 

TAL 

“ 

Transatlantic Abort Landing 

WSB 

- 

Water Spray Boiler 
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B.l Definitions 
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APPENDIX B 

DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B.l Definitions 

Definitions contained in NSTS 22206 , Instructions For Preparation 
of FMEA/CIL , 10 October 1986 , were used with the following 
amplifications and additions . 

INTACT ABORT DEFINITIONS; 

RTLS - begins at transition to OPS 6 and ends at transition 
to OPS 9, post-flight 

TAL - begins at declaration of the abort and ends at 
transition to OPS 9, post-flight 

AOA - begins at declaration of the abort and ends at 
transition to OPS 9, post-flight 

ATO - begins at declaration of the abort and ends at 
transition to OPS 9, post-flight 

CREDIBLE ( CAUSE ) - an event that can be predicted or expected in 
anticipated operational environmental conditions. Excludes an 
event where multiple failures must first occur to result in 
environmental extremes 

CONTINGENCY CREW PROCEDURES - procedures that are utilized beyond 
the standard malfunction procedures, pocket checklists, and cue 
cards 

EARLY MISSION TERMINATION - termination of onorbit phase prior to 
planned end of mission 

EFFECTS/RATIONALE - description of the case which generated the 
highest criticality 

HIGHEST CRITICALITY - the highest functional criticality 
determined in the phase-by-phase analysis 

MAJOR MODE (MM) - major sub-mode of software operational sequence 
(OPS) 

MC - Memory Configuration of Primary Avionics Software System 
( PASS ) 

MISSION - assigned performance of a specific Orbiter flight with 
payload/obj ective accomplishments including orbit phasing and 
altitude (excludes secondary payloads such as GAS cans, 
middeck P/L, etc.) 
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MULTIPLE ORDER FAILURE - describes the failure due to a single 
cause or event of all units which perform a necessary (critical) 
function 

OFF-NOMINAL CREW PROCEDURES - procedures that are utilized beyond 
the standard malfunction procedures, pocket checklists, and cue 
cards 

OPS - software operational sequence 

PRIMARY MISSION OBJECTIVES - worst case primary mission objec- 
tives are equal to mission objectives 

PHASE DEFINITIONS : 

PRELAUNCH PHASE - begins at launch count-down Orbiter 
power-up and ends at moding to OPS Major Mode 102 (liftoff) 

LIFTOFF MISSION PHASE - begins at SRB ignition (MM 102) and 
ends at transition out of OPS 1 (Synonymous with ASCENT) 

ONORBIT PHASE - begins at transition to OPS 2 or OPS 8 and 
ends at transition out of OPS 2 or OPS 8 

DEORBIT PHASE - begins at transition to OPS Major Mode 
301 and ends at first main landing gear touchdown 

LANDING/SAFING PHASE - begins at first main gear 
touchdown and ends with the completion of post-landing 
safing operations 
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APPENDIX B 

DEFINITIONS, GROUND RULES, AND ASSUMPTIONS 


B . 2 IOA Project Level Ground Rules and Assumptions 


The philosophy embodied in NSTS 22206, Instructions for 
Preparation of FMEA/CIL , 10 October 1986 , was employed with the 
following amplifications and additions. 


1. The operational flight software is an accurate 
implementation of the Flight System Software Requirements 
( FSSRs ) . 

RATIONALE: Software verification is out-of-scope of 
this task. 

2. After liftoff, any parameter which is monitored by system 
management (SM) or which drives any part of the Caution and 
Warning System (C&W) will support passage of Redundancy 
Screen B for its corresponding hardware item. 

RATIONALE: Analysis of on-board parameter availability 
and/or the actual monitoring by the crew 
is beyond the scope of this task. 

3. Any data employed with flight software is assumed to be 
functional for the specific vehicle and specific mission 
being flown. 

RATIONALE: Mission data verification is out-of-scope of 
this task. 

4. All hardware (including firmware) is manufactured and 
assembled to the design specifications/drawings. 

RATIONALE: Acceptance and verification testing is 

designed to detect and identify problems 
before the item is approved for use. 

5. All Flight Data File crew procedures will be assumed 
performed as written, and will not include human error in 
their performance. 

RATIONALE: Failures caused by human operational error 
are out-of-scope of this task. 


B-4 



6. All hardware analyses will, as a minimum, be performed at 
the level of analysis existent within NASA/Prime Contractor 
Orbiter FMEA/CILs , and will be permitted to go to greater 
hardware detail levels but not lesser. 

RATIONALE: Comparison of IOA analysis results with 

other analyses requires that both analyses 
be performed to a comparable level of 
detail . 

7. Verification that a telemetry parameter is actually 
monitored during AOS by ground-based personnel is not 
required . 

RATIONALE: Analysis of mission-dependent telemetry 

availability and/or the actual monitoring of 
applicable data by ground-based personnel is 
beyond the scope of this task. 

8. The determination of criticalities per phase is based on the 
worst case effect of a failure for the phase being analyzed. 
The failure can occur in the phase being analyzed or in 

any previous phase, whichever produces the worst case 
effects for the phase of interest. 

RATIONALE: Assigning phase criticalities ensures a 
thorough and complete analysis. 

9. Analysis of wire harnesses, cables, and electrical connectors 
to determine if FMEAs are warranted will not be performed 
nor FMEAs assessed. 

RATIONALE: Analysis was substantially complete prior 

to NSTS 22206 ground rule redirection. 

10. Analysis of welds or brazed joints that cannot be inspected 
will not be performed nor FMEAs assessed. 

RATIONALE: Analysis was substantially complete prior 

to NSTS 22206 ground rule redirection. 

11. Emergency system or hardware will include burst discs and 
will exclude the EMU Secondary Oxygen Pack (SOP), pressure 
relief valves and the landing gear pyrotechnics. 

RATIONALE: Clarify definition of emergency systems to 
ensure consistency throughout IOA project. 
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B . 3 APU-Speclfic Ground Rules and Assumptions 


The IOA analysis was performed to the component or assembly level 
of the APU subsystem. The analysis considered the worst case 
effects of the hardware or functional failure on the subsystem, 
mission, and crew and vehicle safety. 

1 . The APU Controller was analyzed only to the functional 
level . 

RATIONALE: This is in keeping with the NASA and 

Rockwell analyses, and is due to lack of 
adequate data, and resource and schedule 
constraints . 


2. Couplings with caps were considered as one unit for 
analysis purposes. 

RATIONALE: This simplified the analysis, and took into 

account the worst case failure (external 
leak ) . 

3 . Switches were analyzed as failing totally open or 
totally closed, regardless of the number of switch 
contacts. For multiposition switches, the analysis 
considered the worst-case position for failed-on cases. 

RATIONALE: This simplified the analysis, and took into 

account the worst case failure (failure of 
all contacts is worse than failure of any 
one contact). 

4. Fuel line temperature sensor failures were considered 
criticality 3/3, except in cases where fewer than 3 
sensors were available to monitor the status of a 
particular fuel line heater. 

RATIONALE: This was to avoid classifying all fuel line 

temperature sensor failures as 3/lR or 
greater, based on loss of detection of a 
failed-on heater. 


5. The APU Fuel Pump/GGVM Cooling System and Gas Generator 
Injector Cooling System failures were assigned 
criticalities based on the effects of the failure 
during a flight situation where these cooling systems 
were required to be used. 

RATIONALE: This approach considered the worst case 

effects of loss of a system - loss of that 
system under circumstances where use of 
the system is required. 
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APPENDIX C 
DETAILED ANALYSIS 


This section contains the IOA analysis worksheets generated 
during the analysis of this subsystem. The Information on these 
worksheets is intentionally similar to the NASA FMEAs. Each of 
these sheets identifies the hardware item being analyzed, and 
parent assembly, as well as the function. For each failure mode, 
the possible causes are outlined, and the assessed hardware and 
functional criticality for each mission phase is listed, as 
described in the NSTS 22206 , Instructions for Preparation of FMEA 
and CIL, 10 October 1986 . Finally, effects are entered at - Ehe 
bottom of each sheet, and the worst case criticality is entered 
at the top. 


LEGEND FOR IOA ANALYSIS WORKSHEETS 


Hardware Criticalities: 

1 * Loss of life or vehicle 

2 = Loss of mission or next failure of any redundant item 

(like or unlike) could cause loss of life/vehicle 

3 - All others 

Functional Criticalities: 

1R - Redundant hardware items (like or unlike) all of which, 
if failed, could cause loss of life or vehicle. 

2R * Redundant hardware items (like or unlike) all of which, 
if failed, could cause loss of mission. 

Redundancy Screen A: 

1 - Is Checked Out PreFlight 

2 -Is Capable of Check Out PreFlight 

3 = Not Capable of Check Out PreFlight 
NA - Not Applicable 

Redundancy Screens B and C: 

P - Passed Screen 
F - Failed Screen 
NA * Not Applicable 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/22/86 

SUBSYSTEM: APU 

MDAC ID: 100 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: GAS GENERATOR 

FAILURE MODE: NO OUTPUT OR LOW OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU ' ' 

2) POWER SYSTEM 

3) GAS GENERATOR 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION, BED LIFETIME EXCEEDED, CRACKED OR LEAKING 

HOUSING 

EFFECTS/RATIONALE : 

IF OUTPUT IS REDUCED SUFFICIENTY, APU WILL SUFFER UNDERSPEED 
SHUTDOWN. CRITICALITY IS 2/1R DUE TO LOSS OF ONE APU. ABORT: 
CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE LOSS OF 
ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


9/22/86 

APU 

101 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: 

FAILURE MODE: 


GAS GENERATOR 
LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) GAS GENERATOR 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


FLIGHT PHASE 


CRITICALITIES 

HDW/FUNC ABORT HDW/FUNC 


PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/S AFING: 

1/1 



NCY SCREENS: A 

[NA ] 

B [NA ] 

C [NA ] 


LOCATION: 
PART NUMBER: 


AFT COMPARTMENT 
MC201-0001 


CAUSES: MANUFACTURING DEFECT, CORROSION, FATIGUE 

EFFECTS/RATIONALE : 

FUEL LEAK CAN CAUSE FIRE? DETONATION OF FUEL IN FUEL PUMP AND 
FUEL VALVES. POSSIBLE DAMAGE TO OTHER APU'S FROM SHRAPNEL. 
CRITICALITY IS 1/1 DUE TO FIRE AND EXPLOSION HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

APU 

102 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: TURBINE WHEEL 

FAILURE MODE: STRUCTURAL FAILURE 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) TURBINE WHEEL 

4) 

5) 

6 ) 

7) 

3) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 
LANDING/S AFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: OVERSPEED, MANUFACTURING DEFECT, HANDLING DAMAGE, 

CONTAMINATION DAMAGE AND FATIGUE 


EFFECTS/RATIONALE : 

LOSS OF APU, SHRAPNEL DAMAGE IN AFT COMPARTMENT-POTENTIAL LOSS OF 
ANOTHER APU, OR FUEL LEAK. CRITICALITY IS 1/1 DUE TO SHRAPNEL 
DAMAGE EFFECTS. 


REFERENCES : 


REPORT DATE 12/10/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/18/86 

SUBSYSTEM: APU 

MDAC ID: 103 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: TURBINE WHEEL 

FAILURE MODE: BINDING 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) TURBINE WHEEL 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B[P] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 

CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, BEARING FAILURE 

EFFECTS/RATIONALE : 

TURBINE MAY SEIZE UP; APU MAY EXPERIENCE UNDERSPEED SHUTDOWN. 
CRITICALITY IS 2/1R DUE TO LOSS OF APU. 

ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 

LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 
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INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/18/86 

SUBSYSTEM: AFU 

MDAC ID: 104 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: EXHAUST DUCT 

FAILURE MODE: LEAK ... 

LEAD ANALYST; J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) EXHAUST DUCT 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 


HDW/FUNC 

VI 

1/1 

1/1 

1/1 

1/1 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC271-0080-094X 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, FATIGUE FAILURE, 

CQSRSSXOR — - - - 


EFFECTS/RATIONALE : 

RELEASES HOT (-1000F) GASES INTO AFT COMPARTMENT. THIS HOT GAS 
COULD CAUSE DAMAGE TO OTHER AFT COMPARTMENT EQUIPMENT, INCLUDING 
FIRE, AND LOSS OF MULTIPLE AFC’S. CRITICALITY IS 1/1 DUE TO FIRE 
HAZARD AND EFFECT ON OTHER EQUIPMENT. 


REFERENCES : 


REPORT DATE 12/10/86 


C-6 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/26/86 

AFU 

105 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: EXHAUST DUCT BELLOWS 

FAILURE MODE: LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) EXHAUST DUCT 

4) BELLOWS 

5) 

6 ) 

7) 

8 ) 

9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 

1/1 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] 


LOCATION: 
PART NUMBER: 


AFT COMPARTMENT 
MC271-0080-094X 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA ] 


CAUSES: FATIGUE, MANUFACTURING DEFECT, CORROSION 

EFFECTS/RATIONALE: 

RELEASES HOT (-100 OF) GASES INTO AFT COMPARTMENT. THIS HOT GAS 
COULD CAUSE DAMAGE TO OTHER AFT COMPARTMENT EQUIPMENT, INCLUDING 
FIRE AND LOSS OF MULTIPLE APU*S. CRITICALITY IS 1/1 DUE TO FIRE 
HAZARD AND EFFECT ON OTHER EQUIPMENT. 


REFERENCES: NO DESIGN DATA WAS OBTAINED FOR THIS ITEM. 


REPORT DATE 12/10/86 


C-7 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 9/18/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 2/1R 

MDAC ID: 106 ABORT: 1/1 

ITEM: GEARBOX 

FAILURE MODE: LOSS OF OUTPUT 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) GEARBOX 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITI C ALI TIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c C p ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-00 01 


CAUSES: STRIPPED GEARS, BROKEN SHAFTS, SEIZED BEARINGS, CRACKED 

AND DISTORTED HOUSING CAUSING RUBBING OR FATIGUE 

EFFECTS/RATIONALE : 

APU WILL BE LOST DUE TO LOSS OF FUEL PUMP OR LUBE OIL PUMP, OR 
HYDRAULIC SYSTEM WILL BE LOST DUE TO LOSS OF HYDRAULIC PUMP. 
CRITICALITY IS 2/1R FOR LOSS OF ONE APU AND/OR HYDRAULIC SYSTEM. 
ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 
LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-8 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/22/86 

SUBSYSTEM: AFU 

MDAC ID: 107 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: GAS GENERATOR BED HEATER 

FAILURE MODE: FAIL OFF 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) GAS GENERATOR BED HEATER 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/1R 

ATO; 

3/1R 

LANDING/ SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: BROKEN WIRE 

EFFECTS/RATIONALE : 

LOSS OF REDUNDANCY FOR KEEPING GAS GENERATOR BED WARM WHILE APU 
IS INACTIVE. CRITICALITY IS 3/1R FOR DEORBIT BECAUSE LOSS OF 
BOTH HEATERS COULD CAUSE ONE APU TO BE LOST, AND LOSS OF ANOTHER 
APU WOULD BE A CRITICAL SITUATION. 

ABORT: FAILURE HAS NO EFFECT WHILE APU IS RUNNING. 


REFERENCES : 


REPORT DATE 12/10/86 


C-9 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/22/86 

SUBSYSTEM: AFU 

MDAC ID: 108 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: GAS GENERATOR BED HEATER 

FAILURE MODE: GAS LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) GAS GENERATOR BED HEATER 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

:• • » ■ • 


REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

CREATES VERY LIMITED LIFETIME FOR BOTH A AND B HEATER. 
CRITICALITY IS 3/3 BECAUSE SECOND HEATER IS NOT LOST UNTIL A - 
CERTAIN LENGTH OF TIME AFTER IT IS ACTIVATED; IT IS USABLE FOR 
APU DEORBIT STARTUP. 


REFERENCES : 


REPORT DATE 12/10/86 


C-10 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/22/86 

SUBSYSTEM: AFU 

MDAC ID: 109 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: GAS GENERATOR BED HEATER 

FAILURE MODE: SHORT CIRCUIT 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) GAS GENERATOR BED HEATER 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE 


EFFECTS/RATIONALE : 

HEATER IS LOST WHEN HEATER POWER FUSE BLOWS. LOSS OF REDUNDANCY. 
CRITICALITY IS 3/1R FOR DEORBIT BECAUSE LOSS OF BOTH HEATERS 
COULD CAUSE ONE APU TO BE LOST, AND LOSS OF ANOTHER APU WOULD BE 
A CRITICAL SITUATION. 


REFERENCES : 


REPORT DATE 12/10/86 


C-ll 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/23/86 

APU 

110 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: GAS GENERATOR BED HEATER THERMOSTAT 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) GAS GENERATOR BED HEATER 

4) THERMOSTAT 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ON0RBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c [ p ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: ME360-0017-0001 

- . •• .... . .. 



CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF BACKUP CONTROL OF GAS GENERATOR BED HEATERS. IF HEATERS 
ARE LOST FOR ORBIT STAY, APU WILL BE LOST. CRITICALITY IS 3/1R 
DUE TO HEATER CONTROL REDUNDANCY AND APU REDUNDANCY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-12 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/23/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

3/3 

MDAC ID: 

111 

ABORT: 

3/3 

ITEM: 

GAS GENERATOR 

BED HEATER THERMOSTAT 


FAILURE MODE: FAIL CLOSED 

LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) GAS GENERATOR BED HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME360-0017-0001 


CAUSES: SHORT 

EFFECTS/RATIONALE : 

GAS GENERATOR BED HEATERS WILL BE STUCK ON WHILE ACTIVATED; 
AUTOMATIC CONTROL WILL BE LOST. HEATERS CAN BE DEACTIVED, 
HOWEVER. 


REFERENCES : 


REPORT DATE 12/10/86 


C-13 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 9/18/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 2/1R 

MDAC ID: 112 ABORT: 1/1 


ITEM: MAGNETIC PICKUP UNIT 1 

FAILURE MODE: NO OUTPUT, OR INTERMITTENT OUTPUT 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) MPU 1 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRIT ICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: AFT COMPARTMENT 

• • ■ ■ . 


PART NUMBER: MC201-0001 

• - • • 



CAUSES: OPEN CIRCUIT DUE TO MANF. DEFECT, HANDLING DAMAGE, OR_ 

MECHANICAL SHOCK. SHORT TO GROUND DUE TO CONTAMINATION OR 
MOISTURE 

EFFECTS /RA TIONALE : - - r 

GIVES FALSE INDICATION OF UNDERSPEED. WILL PRODUCE UNDERSPEED 
ALARM AND APU SHUTDOWN (IF AUTOMATIC SHUTDOWN IS ENABLED). APU 
CAN BE RESTA RTED IF AUTOMATIC SHUTDOWN IS INHIBITED. 

CRITICALITY IS 2/JR DUE TO LOSS OF APU. ABORT: CRITICALITY IS 
1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN 
ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-14 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/18/86 

SUBSYSTEM: APU 

MDAC ID: 113 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: MAGNETIC PICKUP UNIT 2 

FAILURE MODE: NO OUTPUT 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) ' MPU 2 

4) 

5) 

6 ) 

7) 

8) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO A: 

2/1R 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/1R 

ATO: 

2/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: OPEN CIRCUIT DUE TO MANF. DEFECT, HANDLING DAMAGE, OR 

MECHANICAL SHOCK. SHORT TO GROUND DUE TO CONTAMINATION OR 
MOISTURE. 


EFFECTS/RATIONALE : 

INDICATES SPEED <113% TO COMPARATOR 2; NO EFFECT WHILE APU IS IN 
NORMAL SPEED. IF APU IS TAKEN TO HIGH SPEED (113%) COMPARATOR 1 
WILL CONTROL AT SECONDARY SPEED (115%). 

CRITICALITY IS 3/1R BECAUSE SITUATION IS 2 FAILURES AWAY FROM 
CRITICAL (COMPARATOR 3+ ANOTHER APU). ABORT: CRITICALITY IS 2/1R 
FOR ENGINE -OUT ABORTS BECAUSE SITUATION IS 1 FAILURE AWAY FROM 
CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-15 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/18/86 

SUBSYSTEM: APU 

MDAC ID: 114 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: MAGNETIC PICKUP UNIT 3 

FAILURE MODE: NO OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) POWER SYSTEM 

3) MPU 3 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A(l] 

B [ P 3 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: OPEN CIRCUIT DUE TO MANF. DEFECT, HANDLING DAMAGE, OR 

MECHANICAL SHOCK. SHORT TO GROUND DUE TO CONTAMINATION OR 
MOISTURE. 

EFFECTS/RATIONALE: 

INDICATES SPEED <103% TO COMPARATOR 3. APU SHIFTS TO HIGH SPEED 
(113%) AS COMPARATOR 2 TAKES OVER. CRITICALITY IS 3/1R BECAUSE 
SITUATION IS 2 FAILURES AWAY FROM CRITICAL (COMPARATOR 2 + 
COMPARATOR 1 FAILURES CAN PRODUCE UNCONTROLLED OVERSPEED, 
STRUCTURAL FAILURE OF TURBINE, SHRAPNEL DAMAGE IN AFT 
COMMPARTMENT , FIRE HAZARD). ABORT: CRITICALITY IS 2/1R FOR 
ENGINE-OUT ABORTS BECAUSE ONE MORE FAILURE (COMPARATOR 2) CAN 
CAUSE LOSS OF AN APU AND POSSIBLE LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-16 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

8/18/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 


FLIGHT: 

1/1 

MDAC ID: 

115 


ABORT: 

1/1 

ITEM: 

FUEL TANK 




FAILURE MODE: RUPTURE AT 

OPERATING PRESSURE 



LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. 

BARNES 



BREAKDOWN HIERARCHY: 


1 ) 

APU 

2 ) 

FUEL SYSTEM 

3 ) 

FUEL TANK 

4 ) 

SHELL 

5 ) 


6 ) 


7 ) 


8 ) 


9 ) 



CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC282-0084-0100 


CAUSES: MANUFACTURING DEFECT. HANDLING DAMAGE. 

EFFECTS/RATIONALE : 

1) LOSS OF FUEL-LOSS OF ONE APU, 2) SHRAPNEL DAMAGE # IN AFT 
COMPARTMENT, 3) FUEL IN AFT COMPARTMENT - FIRE HAZARD, HARDWARE 
CRITICALITY IS 1 DUE TO SHRAPNEL AND FIRE HAZARD 
FUNCTIONAL CRITICALITY IS 1 DUE TO FIRE HAZARD. SCREEN C: 
RUPTURE OF APU 1 FUEL TANK CAN CAUSE SHRAPNEL DAMAGE TO APU 2 
FUEL TANK AND VICEVERSA. 


REFERENCES : 


REPORT DATE 12/10/86 


C-17 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 8/18/86 

SUBSYSTEM: APU 

MDAC ID: 116 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1- 


ITEM: FUEL TANK 

FAILURE MODE: EXTERNAL LEAK (FUEL) 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARITES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL TANK 

4) SHELL 

5) 

6 ) 

7) 

8 ) 

9) 


CRI TI CALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

Liftoff: 

1/1 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC282-0084-0100 


CAUSES: DEFECTIVE WELD MANUFACTURING DEFECT, HANDLING DAMAGE 


EFFECTS/RATIONALE : 

1) LOSS OF FUEL-LOSS OF ONE APU, 2) FUEL IN AFT COMPARTMENT-FIRE 
HAZARD. CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 


C-18 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

8/19/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

2/1R 

MDAC ID: 

117 

ABORT: 

1/1 

ITEM: 

FUEL TANK 



FAILURE MODE: EXTERNAL LEAK 

(GN2) 


LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL TANK 

4) SHELL 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B[P] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC282-0084-0100 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE 

EFFECTS/RATIONALE : 

1) LOSS OF FUEL PRESSURE, 2) LOSS OF APU. CRITICALITY IS 2/1R 
DUE TO LOSS OF ONE APU. ABORT: CRITICALITY IS 1/1 FOR ENGINE -OUT 
ABORTS DUE TO POSSIBLE LOSS 6f ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-19 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 8/19/86 

SUBSYSTEM: APU 

MDAC ID: 118 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM : FUEL TANK 

FAILURE MODE: INTERNAL LEAK THROUGH DIAPHRAGM 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL TANK 

4) DIAPHRAGM 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

3/3 

AO A: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 


■■ ... ■ 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC282-0084-0100 

CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, INSTALLATION 

ERROR, FATIGUE FAILURE 

EFFECTS/RATIONALE : 

1) MIGRATION OF FUEL INTO GAS, AND VICE VERSA, 2) DEC R EA SED FUEL 
TANK PRESSURE; POSSIBLE LOSS OF APU (IF PRESSURE DECREASE IS 
GREAT ENOUGH). CRITICALITY IS 2/1R DUE TO LOSS OF ONE APU. 
ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS, DUE TO POSSIBLE 
LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-20 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 8/20/86 

SUBSYSTEM: APU 

MDAC ID: 119 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: FUEL TANK GN2 LINE 

FAILURE MODE: LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL TANK GN2 LINE 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465203 


CAUSES: MANUFACTURING DEFECT, HANDLING, INSTALLATION ERROR 
EFFECTS/RATIONALE : 

1) LOSS OF FUEL PRESSURE, 2) LOSS OF APU. CRITICALITY IS 2/1R 
DUE TO LOSS OF ONE APU. ABORT: CRITICALITY IS 1/1 FOR ENGINE 
OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-21 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 8/20/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 2/1R 

MDAC ID: 120 ABORT: 1/1 

ITEM: FUEL TANK GN2 FILL COUPLING 

FAILURE MODE: EXTERNAL LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL TANK GN2 LINE 

4) GN2 FILL COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRIT IC ALI TIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c [ P 3 


LOCATION: APU SERVICE PANEL 

PART NUMBER: ME276-0030-0017 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, CONTAMINATION 


EFFECTS/RATIONALE : 

1) LOSS OF FUEL PRESSURE, 2) LOSS OF APU. CRITICALITY IS 2/1R DUE 
T O LOS S OF ONE APU^iz^T^’—^^^^ — 

ABORT: CRITiCALLY IS 1/1 FOR ' ENGINE-OOT ABORTS, DUE' TO POSSIBLE 

LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-22 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/08/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: APU 

FLIGHT: 

3/3 

MDAC ID: 121 

ABORT: 

3/3 

ITEM: FUEL TANK GN2 

FAILURE MODE: FAILS CLOSED 

FILL COUPLING 


LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL TANK GN2 LINE 

4) GN2 FILL COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: APU SERVICE PANEL 

PART NUMBER: ME276-0030-0017 

CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

CANNOT SERVICE FUEL TANK? POSSIBLE LAUNCH DELAY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-23 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/06/86 

APU 

122 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL TANK ISOLATION VALVE 

FAILURE MODE: FAILS TO OPEN 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL TANK ISOLATION VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALI TIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

3/3 

TAL: 

/NA 

ONORBIT: 

3/3 

AOA: 

/NA 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ p 3 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0558-000X 


CAUSES: CONTAMINATION, CORROSION, OPEN OR SHORT COIL . 

EFFECTS/RATIONALE : 

REDUNDANT VALVE ALLOWS FUEL TO REACH APU; NO EFFECT. CRITICALITY 
IS 3/1R DUE TO REDUNDANCY OF APU'S AND OF FUEL TANK ISOLATION 
VALVES. FAILURE CANNOT OCCUR AFTER APU START. 


REFERENCES: 


REPORT DATE 12/10/86 


C-24 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/06/86 

APU 

123 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/2R 

ABORT: 3/2R 


ITEM: FUEL TANK ISOLATION VALVE 

FAILURE MODE: FAILS TO CLOSE (STUCK OPEN); INTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 


1 ) 

APU 

2 ) 

FUEL 

3 ) 

FUEL 

4 ) 


5 ) 


6 ) 


7 ) 


8 ) 


9 ) 



HIERARCHY: 

SYSTEM 

TANK ISOLATION VALVE 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 


ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 


RTLS: 

3/3 

LIFTOFF: 

3/2R 


TAL: 

3/3 

ONORBIT: 

3/3 


AOA: 

3/3 

DEORBIT: 

3/3 


ATO: 

3/2R 

LANDING/ SAFING: 

3/2R 




REDUNDANCY SCREENS: 

A [ 3 ] 

B 

C P ] 

C [ P ] 

LOCATION: AFT COMPARTMENT 




PART NUMBER: ME284-0558-000X 




CAUSES: CONTAMINATION 

, MANUFACTURING 

DEFECT 



EFFECTS/RATIONALE : 

SECONDARY FUEL VALVE PROVIDES REDUNDANT SHUTOFF OF FUEL; NO 
EFFECT. CRITICALITY IS 3/2R DUE TO REDUNDANCY OF APU'S AND OF 
FUEL SHUTOFF VALVES. IF FUEL COULD NOT BE SHUT OFF, TURBINE 
WOULD RUN AWAY AND COME APART. 


REFERENCES: 


REPORT DATE 12/10/86 


C-25 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/12/86 

SUBSYSTEM: APU 

MDAC ID: 124 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: FUEL TANK ISOLATION VALVE 

FAILURE MODE: FAILS TO REMAIN OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL TANK ISOLATION VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUN6 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/1R 

TAL: 

2/lR 

ONORBIT: 

3/3 

AOA: 

2/lR 

DEORBIT: 

3/1R 

ATO: 

2/lR 

LANDING/S AFING: 

3/1R 

• u . ...... T „ . 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0558-000X 


CAUSES: SHORT OR OPEN CIRCUIT IN COIL 

EFFECTS/ltA TiONAL E : __ _ _ 

REDUNDANT VALVE ALLOWS FUEL TO REACH APU; NO EFFECT. CRITICALITY 
IS 3/1R DUE TO REDUNDANCY OF APU'S AND OF FUEL TANK ISOLATION 

ABORT: CRITICALITY IS 2/lR FOR ENGINE-OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-26 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/06/86 

AFU 

125 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: FUEL TANK ISOLATION VALVE 

FAILURE MODE: BARRIER LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 


1) 

APU 

2) 

FUEL 

3) 

FUEL 

4) 


5) 


6) 


7) 


8) 


9) 



HIERARCHY: 

SYSTEM 

TANK ISOLATION VALVE 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0558-000X 


.CAUSES: MANUFACTURING DEFECT, FATIGUE FAILURE 
EFFECTS/RATIONALE : 

POSSIBLE SHORT CIRCUIT IN SOLENOID COIL OR RUPTURE OF VALVE DUE 
TO HYDRAZINE DECOMPOSITION: EXTERNAL FUEL LEAK. CRITICALITY IS 
1/1 FOR FUEL LEAK DUE TO FIRE HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 


C-27 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 10/06/86 HIGHEST CRITICALITY 

SUBSYSTEM: AFU PLIGHT: 

MDAC ID: 126 ABORT: 

ITEM: FUEL TANK ISOLATION VALVE 


FAILURE MODE: EXTERNAL LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL TANK ISOLATION VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

2/1R 

AO A: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION^ AFT COMPARTMENT ir . 

PART NUMBER: ME284-0558-000X 

CAUSES: MANU FACTURING DEFECT, INSTALLATION ERROR 

EFFECTS /RATIONALE : _ _ _ ' 

FUEL IN AFT COMPARTMENT: FIRE HAZARD. CRITICALITY IS 1/1 
FIRE HAZARD. z?-* • 


REFERENCES : 


REPORT DATE 12/10/86 C-28 


HDW/FUNC 

1/1 

1/1 


DUE TO 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/25/86 

AFU 

127 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL TANK ISOLATION VALVE 

FAILURE MODE: FAILS TO RELIEVE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 


1) 

APU 

2) 

FUEL 

3) 

FUEL 

4) 


5) 


6) 


7) 


8) 


9) 



HIERARCHY: 

SYSTEM 

TANK ISOLATION VALVE 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/1R 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0558-000X 




CAUSES: CONTAMINATION, MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

NO EFFECT UNLESS REDUNDANT VALVE *ALSO FAILS TO RELIEVE; IF SO, 
POSSIBLE LINE RUPTURE AND FUEL LEAK-FIRE HAZARD. CRITICALITY IS 
2/1R DUE TO VALVE REDUNDANCY. FAILURE CANNOT OCCUR WHILE APU IS 
OPERATING. 


REFERENCES : 


REPORT DATE 12/10/86 


C-29 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEE T 


DATE: 9/10/86 

SUBSYSTEM: APU 

MDAC ID: 128 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: FUEL PUMP 

FAILURE MODE: INTERNAL LEAK PAST FACE SEAL 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, CONTAMINATION 


EFFECTS/RATIONALE : 

IF FACE SEAL IS WORN OR DAMAGED AND ALLOWS METAL-TO-METAL CONTACT 
IN ADDITION TO LEAK, HEAT SOURCE CAN CAUSE FUEL DETONATION; APU 
IS LOS T AND FUEL IS RELEA SED INTO AFT COMPARTMENT CAUSING FIRE ' 
HAZARD. 

IF NO METAL-TO-METAL CONTACT IS INVOLVED, LEAK SHOULD BE HANDLED 
BY SEAL CAVITY DRAIN SYSTEM. IF CATCH BOTTLE FILLS AND RELIEVES 
OVERBOARD, HYDRAZINE MAY BE INGESTED INTO AFT COMPARTMENT THROUGH 
VENT DOORS. CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 


C-30 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

9/10/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

1/1 

MDAC ID: 

129 

ABORT: 

1/1 

ITEM: 

FUEL PUMP 



FAILURE MODE: EXTERNAL LEAK 



LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT IN SEAL OR COUPLING 

EFFECTS/RATIONALE : 

1) LOSS OF FUEL - POSSIBLE LOSS OF ONE APU, 2) FUEL IN AFT 
COMPARTMENT-FIRE HAZARD. CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 


C-31 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/10/86 

SUBSYSTEM: AFU 

MDAC ID: 130 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: FUEL PUMP 

FAILURE MODE: NO OUTPUT OR LOW OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP 

4 ) 

5) 

6 ) 

7) 

8 ) 

9 ) 


C RITI CALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 

- - 

* ■ 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: LOSS OF INPUT POWER, INTERNAL LEAKAGE, JAMMING OR 

BINDING, CHECK VALVE OR RELIEF VALVE FAILS OPEN 

EFFECTS/RATIONALE : 

IF OUTPUT IS LOW ENOUGH, APU WILL SHUT DOWN. CRITICALITY IS 2/1R 
DUE TO LOSS OF ONE APU. ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT 
ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-32 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/11/86 

SUBSYSTEM: AFU 

MDAC ID: 131 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP BYPASS VALVE 

FAILURE MODE: FAILS OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP 

4) BYPASS VALVE 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/ NA 

LIFTOFF: 

3/3 

TAL: 

/ NA 

ONORBIT: 

3/3 

AOA: 

/NA 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 




REDUNDANCY SCREENS: A [ 1 ] B[P] C [ P J 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 

CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

APU WILL NOT START IF FAILURE OCCURS WHILE APU IS SHUT DOWN. 
FAILURE IS NOT CREDIBLE WHILE APU IS RUNNING. CRITICALITY IS 
2/1R DUE TO LOSS OF ONE APU. PRELAUNCH: WILL LEAD TO LAUNCH 
SCRUB. 

ABORT: FAILURE IS NOT CREDIBLE WHILE APU IS RUNNING. 


REFERENCES: 


NO DESIGN DATA WAS OBTAINED 


FOR THIS VALVE. 


REPORT DATE 12/10/86 


C-33 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 9/11/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 2/1R 

MDAC ID: 132 ABORT: 2/1R 

ITEM: FUEL PUMP BYPASS VALVE 

FAILURE MODE: FAILS CLOSED 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP 

4) BYPASS VALVE 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: CONTAMINATION, CORROSION 

EFFECTS/RATIONALE : 

IF APU IS RUNNING, FAILURE WILL HAVE NO EFFECT. IF APU IS SHUT 
DOWN, IT WILL NOT START. APU WILL BE LOST. CRITICALITY IS 2/1R 
DUE TO LOSS OF ONE APU. 

PRELAUNCH: NO EFFECT UNTIL APU STARTUP; THEN, WILL CAUSE LAUNCH 
SCRUB. ABORT: NO EFFECT ON OPERATING APU. IF APU IS SHUT DOWN, 
IT CANNOT BE RESTARTED. 


REFERENCES: NO DESIGN DATA WAS OBTAINED FOR THIS VALVE. 


REPORT DATE 12/10/86 


C-34 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/11/86 

SUBSYSTEM: AFU 

MDAC ID: 133 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: FUEL PUMP RELIEF VALVE 

FAILURE MODE: RELIEVES AT LOW PRESSURE/FAILS OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP 

4) RELIEF VALVE 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: CONTAMINATION, CORROSION, MECHANICAL FAILURE 

EFFECTS/RATIONALE : 

COULD DIVERT FUEL PUMP OUTPUT FROM GAS GENERATOR LEADING TO 
DEGRADED APU PERFORMANCE OR APU SHUTDOWN. CRITICALITY IS 2/1R 
DUE TO LOSS OF APU. ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT 
ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-35 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 12/01/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 3/1R 

MDAC ID: 134 ABORT: 2/1R 

ITEM: FUEL PUMP RELIEF VALVE 

FAILURE MODE: FAILS TO RELIEVE 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP 

4) RELIEF VALVE 

5) 

6 ) 

7) 

8 ) 

*) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO A: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

c C P ) 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION , CORROSION 

EFFECTS/RATIONALE: 

FLOW RESTRICTION DOWNSTREAM OF PUMP CAN CAUSE PRESSURE RISE - 
WITHOUT RELIEF, PRESSURE COULD FORCE FUEL INTO FUEL PUMP SEAL 
CAVITY AND POSSIBLY INTO THE GEARBOX. GEARBOX LUBRICATION COULD 
BE DEGRADED, LEADING TO OVERHEATING AND LOSS OF APU. 

CRITICALITY IS 3/1R (ONE FAILURE AWAY FROM LOSS OF ONE APU). 
ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-36 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/25/86 

APU 

135 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: FUEL PUMP RELIEF VALVE 

FAILURE MODE: EXTERNAL LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP 

4) RELIEF VALVE 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

'DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 




REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 

CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR 

EFFECTS/RATIONALE : 

FUEL LEAK INTO AFT COMPARTMENT - FIRE HAZARD. CRITI CALIT Y Y IS 
1/1 DUE TO FIRE HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 


C-37 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/01/86 

AFU 

136 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: FUEL PUMP FILTER 

FAILURE MODE: BLOCKAGE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP 

4) FILTER 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


PLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC20I-0001 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

IF BLOCKAGE IS SEVERE, APU WILL BE STARVED OF FUEL AND WILL SHUT 
DOWN. CRITICALITY IS 2/1R DUE TO LOSS OF AN APU. ABORT: 
CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBILITY OF 
LOSING ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-38 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


HDW/FUNC 
3/1R 
2/1R 

ITEM: FUEL PUMP FILTER 

FAILURE MODE: FAILS OPEN-NO FILTERING 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/25/86 

AFU 

137 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 


1) 

APU 

2) 

FUEL SYSTEM 

3) 

FUEL PUMP 

4) 

FILTER 

5) 


6) 


7) 


8) 


9) 



CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: ' 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/1R 

AO A: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 



CAUSES: HANDLING DAMAGE, MANUFACTURING DEFECT 



EFFECTS/RATIONALE : 

ANY CONTAMINATION PRESENT WOULD PASS INTO FUEL VALVES AND GAS 
GENERATOR; COULD CAUSE APU TO SHUT DOWN IF VALVE FAILED CLOSED OR 
GAS GENERATOR OBSTRUCTED. CRITICALITY IS 3/1R DUE TO POSSIBLE 
LOSS OF ONE APU IF CONTAMINATION IS PRESENT. 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-39 


INDEPENDENT ORB I TER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 9/12/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 1/1 

MDAC ID: 138 ABORT: 1/1 

ITEM: FUEL PUMP DRAIN COUPLING 

FAILURE MODE: EXTERNAL LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP 

4) DRAIN COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

2/1R 

AO A: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT . . 

EFFECTS/RATIONALE : 

1) LOSS OF FUEL-POSSIBLE LOSS OF ONE APU. 2) FUEL IN AFT 
COMPARTMENT-FIRE HAZARD. CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 
PRELAUNCH: NO FUEL IS PRESENT IN PUMP UNTIL APU FUEL TANK VALVES 

ARE OPENED FOR STARTUP. 


REFERENCES : 


REPORT DATE 12/10/86 


C-40 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/06/86 

APU 

139 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

2/1R 


ITEM: PRIMARY FUEL VALVE 

FAILURE MODE: FAILS TO CLOSE (STUCK OPEN); FAILS TO REMAIN 

CLOSED 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) PRIMARY FUEL VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO A: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION, SHORTED OR OPEN SOLENOID COIL, 

MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

APU RUNS AT HIGH SPEED (113%) ON SECONDARY FUEL VALVE (COMPARATOR 
2). CRITICALITY IS 3/1R DUE TO REDUNDANCY OF CONTROL VALVES AND 
APU 1 S . 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 
LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-41 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/06/86 

APU 

140 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: PRIMARY FUEL VALVE 

FAILURE MODE: FAILS TO OPEN (STUCK CLOSED) 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 


1) 

APU 

ijj 

2) 

FUEL SYSTEM 


3) 

PRIMARY FUEL VALVE 


4) 



5) 



6) 



7) 



8) 



9) 




FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

2/1R 

2/1R 

2/1R 

2/1R 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] 


C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

APU WILL SHUT DOWN DUE TO FUEL STARVATION. CRITICALITY IS 2/1R 
DUE TO LOSS OF AN APU. 

ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 
LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-42 


II! IIII 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/06/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

3/1R 

MDAC ID: 

141 

ABORT: 

2/1R 

ITEM: 

PRIMARY FUEL VALVE 


FAILURE MODE: INTERNAL 

LEAK TO OUTLET 


LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) PRIMARY FUEL VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 



CAUSES: MANUFACTURING DEFECT, 

FATIGUE FAILURE 

OF SEAT, 


CONTAMINATION 
EFFECTS/RATIONALE : 

ALLOWS FUEL PAST PRIMARY VALVE TO SECONDARY FUEL VALVE AND GAS 
GENERATOR; AT WORST, SECONDARY VALVE WILL TAKE OVER AND CONTROL 
APU AT HIGH SPEED (113%). CRITICALITY IS 3/1R DUE TO REDUNDANCY 
IN CONTROL VALVES AND APU'S. 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 
LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-43 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/06/86 

APU 

142 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: PRIMARY FUEL VALVE 

FAILURE MODE: INTERNAL LEAK TO BYPASS 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) PRIMARY FUEL VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

2/1R 

2/1R 

2/1R 

2/1R 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] C[P] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, FATIGUE FAILURE OF SEAT, 

CONTAMINATION 


EFFECTS/RATIONALE : 

DIVERTS FUEL FROM GAS GENERATOR BACK TO FUEL PUMP INLET; AT 
WORST, APU WILL SHUT DOWN DUE TO FUEL STARVATION. CRITICALITY IS 
2/1R DUE TO LOSS OF APU. 

ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 
LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-44 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/07/86 

APU 

143 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: PRIMARY FUEL VALVE 

FAILURE MODE: INTERNAL BARRIER LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) PRIMARY FUEL VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE HDW/FUNC 

PRELAUNCH: 1/1 

LIFTOFF: 1/1 

ONORBIT: 3/3 

DEORBIT: 1/1 

LANDING/SAFING: 1/1 

REDUNDANCY SCREENS: A [NA ] 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


B [NA ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA ] 


LOCATION: 
PART NUMBER: 


AFT COMPARTMENT 
MC201-0001 


CAUSES: MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

SHORT CIRCUIT IN THE COIL; LOSS OF VALVE FUNCTION. VALVE WILL BE 
FAILED OPEN. APU WILL RUN AT HIGH SPEED (113%) ON SECONDARY FUEL 
VALVE. FUEL PRESSURE WILL CAUSE FUEL LEAK TO AFT COMPARTMENT- 
FIRE HAZARD. POSSIBLE FUEL DETONATION. 

CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 


C-45 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/07/86 

APU 

144 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: PRIMARY FUEL VALVE 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) PRIMARY FUEL VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


SUBSYS LEAD: J. BARNES 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 
LANDING/S AFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA } 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

FUEL IN AFT COMPARTMENT NEAR IGNITION SOURCE (HEAT) - FIRE 
HAZARD. CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES: 


REPORT DATE 12/10/86 


C-46 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/07/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 


FLIGHT: 

2/1R 

MDAC ID: 

145 


ABORT: 

1/1 

ITEM: 

SECONDARY 

FUEL VALVE 



FAILURE MODE: FAILS TO 

OPEN; FAILS TO REMAIN 

OPEN 


LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. 

BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SECONDARY FUEL VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AO A: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/S AFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION, SHORTED OR OPEN SOLENOID COIL, 

MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

APU SHUTS DOWN DUE TO FUEL STARVATION. CRITICALITY IS 2/1R DUE 
TO LOSS OF APU. 

ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 
LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-47 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/07/86 

APU 

146 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: SECONDARY FUEL VALVE 

FAILURE MODE: FAILS OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SECONDARY FUEL VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 



CRITICALITIES 

FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/1R 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/1R 

ATO: 

LANDING/SAFING: 

3/1R 



HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


REDUNDANCY SCREENS: A [ 2 ] B [ P ] 


C [ P ] 


LOCATION; AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE: 

NO EFFECT UNLESS APU IS TAKEN TO HIGH SPEED (113%); THEN, PRIMARY 
VALVE WILL TAKE OVER AT 115% (COMPARATOR 3). CRITICALITY IS 3/1R 
DUE TO CONTROL VALVE AND APU REDUNDANCY. 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS WHERE ONE APU 
LOSS CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-48 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/07/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

1/1 

MDAC ID: 

147 

ABORT: 

1/1 

ITEM: 

SECONDARY 

FUEL VALVE 


FAILURE MODE: FAILS MID- 

-POSITION 


LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SECONDARY FUEL VALVE 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

FUEL FROM PRIMARY VALVE CAN REACH GAS GENERATOR THROUGH SECONDARY 
VALVE REGARDLESS OF PRIMARY VALVE POSITION; RESULT IS 
UNCONTROLLED APU OVERSPEED, AND APU AUTOMATIC SHUTDOWN AT 129% 

(IF AUTO SHUTDOWN IS ENABLED). TURBINE WILL GO BEYOND 129% USING 
FUEL REMAINING DOWNSTREAM OF TANK ISOLATION VALVES - MAY COME 
APART. CRITICALITY IS 1/1 DUE TO SHRAPNEL DAMAGE EFFECTS IN AFT 
COMPARTMENT. 


REFERENCES : 


REPORT DATE 12/10/86 


C-49 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 10/07/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 3/1R 

MDAC ID: 148 ABORT: 2/1R 

ITEM: SECONDARY FUEL VALVE 

FAILURE MODE: INTERNAL LEAK TO OUTLET 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SECONDARY FUEL VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/lR 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/S AFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION/ MANUFACTURING DEFECT, FATIGUE FAILURE OF 

VALVE SEAT 

EFFECTS/RATIONALE : 

NO EFFECT UNLESS APU TAKEN TO HIGH SPEED (113%); THEN, IN WORST 
CASE, PRIMARY VALVE WILL TAKE OVER AT 115% (COMPARATOR 3). 
CRITICALITY IS 3/1R DUE TO CONTROL VALVE AND APU REDUNDANCY. 
ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS WHERE ONE APU 
LOSS CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-50 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/07/86 

APU 

149 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: SECONDARY FUEL VALVE 

FAILURE MODE: INTERNAL LEAK TO BYPASS 


LEAD 

ANALYST: J. BARNES SUBSYS 

LEAD: J. 

BARNES 

BREAKDOWN HIERARCHY: 




1) 

APU 




2) 

FUEL SYSTEM 




3) 

SECONDARY FUEL VALVE 



4) 





5) 





6) 





7) 





8) 





9) 







CRITICALITIES 



FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

1/1 


LIFTOFF: 

2/1R 

TAL: 

1/1 


ONORBIT: 

2/1R 

AO A: 

1/1 


DEORBIT: 

2/1R 

ATO: 

1/1 


LANDING/SAFING: 

2/1R 




REDUNDANCY SCREENS: A [ 1 ] B [ P ] C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT, FATIGUE FAILURE OF 

VALVE SEAT 


EFFECTS/RATIONALE : 

FUEL IS DIVERTED FROM GAS GENERATOR TO PUMP INLET. IN WORST 
CASE, APU MAY SHUT DOWN DUE TO UNDERSPEED. CRITICALITY IS 2/1R 
DUE TO LOSS OF APU. 

ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 
LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-51 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/08/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

1/1 

MDAC ID: 

150 

ABORT: 

1/1 

ITEM: 

SECONDARY 

FUEL VALVE 


FAILURE MODE 

!: EXTERNAL 

LEAK 


LEAD ANALYST 

': J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SECONDARY FUEL VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

FUEL IN AFT COMPARTMENT NEAR IGNITION SOURCE (HEAT) - FIRE 
HAZARD. CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 


C-52 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/25/86 

SUBSYSTEM: APU 

MDAC ID: 151 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: FUEL LINE-UPSTREAM OF TANK ISOL VALVES 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 

HIERARCHY 

1) 

APU 


2) 

FUEL 

SYSTEM 

3) 

FUEL 

LINE 

4) 



5) 



6) 



7) 



8) 



9) 




CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465XXX 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE 

EFFECTS/RATIONALE : 

1) LOSS OF FUEL-LOSS OF ONE APU. 2) FUEL IN AFT COMPARTMENT-FIRE 
HAZARD. CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 


C-53 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 8/27/86 

SUBSYSTEM: APU 

MDAC ID: 152 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: FUEL LINE-DOWNSTREAM OF TANK ISOL VALVES 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL LINE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

1/1 

1/1 

3/3 

1/1 

1/1 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465XXX 

CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE 


EFFECTS/RATIONALE : 

1) LOSS OF FUEL- LOSS OF ONE APU. 2) FUEL IN AFT COMPARTMENT-FIRE 
HAZARD. CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 


C-54 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


HDW/FUNC 
1/1 
1/1 

ITEM: FUEL TANK HYDRAZINE FILL COUPLING 

FAILURE MODE: EXTERNAL LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

AFU 

153 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN 

HIERARCHY 

1) 

APU 


2) 

FUEL 

SYSTEM 

3) 

FUEL 

LINES 

4) 

FILL 

COUPLING 

5) 



6) 



7) 



8) 



9) 




FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

2/1R 

2/1R 

1/1 

2/1R 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 


LOCATION: AFU SERVICE PANEL 

PART NUMBER: ME276-0030-0015 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, CONTAMINATION 

EFFECTS/RATIONALE : 

FUEL LEAKS OUT, ESCAPES TO OUTSIDE AROUND AFU SERVICE PANEL. 
SOME FUEL COULD BE INGESTED INTO AFT COMPARTMENT THROUGH VENT 
DOOR 8 DURING ENTRY (FIRE HAZARD). APU IS LOST DUE TO LOSS OF 
FUEL. CRITICALITY IS 1/1 FOR ENTRY, DUE TO FIRE HAZARD. 

ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-55 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/08/86 HIGHEST CRITICALITY 

SUBSYSTEM: APU FLIGHT: 

MDAC ID: 154 ABORT: 

ITEM: FUEL TANK HYDRAZINE FILL COUPLING 

FAILURE MODE: FAILS CLOSED 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 

HIERARCHY 

1) 

APU 


2) 

FUEL 

SYSTEM 

3) 

FUEL 

LINES 

4) 

FILL 

COUPLING 

5) 



6) 



7) 



8) 



9) 




CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

- ; 


REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: APU SERVICE PANEL 

PART NUMBER: ME276-0030-0015 


CAUSE S: FILTER BLOCKAGE, CONTAMINATION 

EFFECTS/RATIONALE : 

CANNOT SERVICE FUEL TANK; POSSIBLE LAUNCH DELAY. 


REFERENCES : 


REPORT DATE 12/10/86 C-56 


HDW/FUNC 

3/3 

3/3 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/30/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

1/1 

MDAC ID: 

155 

ABORT: 

1/1 

ITEM: 

FUEL LINE TEST 

POINT COUPLING 


FAILURE MODE: EXTERNAL LEAK 

LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL LINES 

4) TEST POINT COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

3/3 

AO A: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/ SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: APU SERVICE PANEL 

PART NUMBER: ME276-0032-0025 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION, HANDLING DAMAGE 

EFFECTS/RATIONALE : 

LOSS OF FUEL; IF APU OPERATING, FUEL COULD BE DEPLETED, APU WOULD 
BE LOST. NO LEAK IS POSSIBLE BEFORE FUEL TANK VALVES ARE OPENED 
FOR APU START, EXCEPT FOR RESIDUAL FUEL IN LINE. FUEL ESCAPES 
AROUND APU SERVICE PANEL, MAY BE INGESTED INTO AFT 
COMPARTMENT THROUGH VENT DOOR 8 DURING ENTRY (FIRE HAZARD). 
CRITICALITY IS 1/1 FOR ENTRY DUE TO FIRE HAZARD. ABORT: 
CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS, WHERE LOSS OF ONE APU 
CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-57 


INDEPENDENT ORBITER ASSESSMENT 


ORBITER SUBSYSTEM 

DATE: 9/08/86 

SUBSYSTEM: AFU 

MDAC ID: 156 

ITEM: FUEL LINE TEST 

FAILURE MODE: FAILS CLOSED 

LEAD ANALYST: J. BARNES 


BREAKDOWN 

HIERARCHY: 

1) 

APU 


2) 

FUEL 

SYSTEM 

3) 

FUEL 

LINES 

4) 

TEST 

POINT COUPLING 

5) 



6) 



7) 



8) 



9) 




ANALYSIS WORKSHEET 

HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 

POINT COUPLING 
SUBSYS LEAD: J. BARNES 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/F 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA 


LOCATION: AFU SERVICE PANEL 

PART NUMBER: ME276-0032-0025 

CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

NO EFFECT ON STANDARD TURNAROUND ACTIVITIES. * 


REFERENCES : 


HDW/FUNC 

3/3 

3/3 


REPORT DATE 12/10/86 


C-58 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

9/08/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

1/1 

MDAC ID: 

157 

ABORT: 

1/1 

ITEM: 

FUEL LINE 

FLEX HOSE 


FAILURE MODE: LEAK 

LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN 

HIERARCHY 

1) 

APU 


2) 

FUEL 

SYSTEM 

3) 

FUEL 

LINES 

4) 

FLEX 

HOSE 

5) 



6) 



7) 



8) 



9) 




CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

' 1/1 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: ME271-0079-58XX 




CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE 

EFFECTS/RATIONALE : 

1) LOSS OF FUEL TO APU. 2) FUEL IN AFT COMPARTMENT-FIRE HAZARD. 
CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 


C-59 


c- ^ 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 9/08/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: _AFU FLIGHT: 1/1 

MDAC ID: 158 ABORT: 1/1 

ITEM: FUEL LINE HIGH POINT BLEED COUPLING 

FAILURE MODE: EXTERNAL LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 

HIERARCHY: 

1) 

APU 


2) 

FUEL 

SYSTEM 

3) 

FUEL 

LINES 

4) 

HIGH 

POINT BLEED COUPLING 

5) 



6) 



7) 



8) 



9) 




CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 

: ' 


REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME276-0032-0027 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, INSTALLATION 

ERROR 

EFFECTS/RATIONALE : 

1) LOSS OF FUEL-LOSS OF ONE APU. 2) FUEL IN AFT COMPARTMENT-FIRE 
HAZARD. CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES: 


REPORT DATE 12/10/86 


C-60 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/08/86 

SUBSYSTEM: AFU 

MDAC ID: 159 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL LINE HIGH POINT BLEED COUPLING 

FAILURE MODE: FAILS CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 


1) 

APU 


2) 

FUEL 

SYSTEM 

3) 

FUEL 

LINES 

4) 

HIGH 

POINT BLEED COUPLING 

5) 



6) 



7) 



8) 



9) 




CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME2 7 6-003 2 -0027 


CAUSES: CONTAMINATION, FILTER BLOCKAGE 

EFFECTS/RATIONALE : 

CANNOT PERFORM HYDRAZINE SERVICING-POSSIBLE LAUNCH DELAY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-61 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/22/86 

SUBSYSTEM: AFU 

MDAC ID: 160 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL TANK HEATER 

(11A,11B,12A,12B,21A,21B,22A,22B,31A,31B,32A,32B) 
FAILURE MODE: FAIL OFF, OR LOW OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 




1) 

APU 




2) 

FUEL SYSTEM 




3) 

FUEL TANK HEATER 


... 


4) 





5) 





6) 





7) 





8) 





9) 









CRITICALITIES 



FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 


LIFTOFF: 

3/3 

TAL: 

3/3 


ONORBIT: 

3/1R 

AOA: 

3/3 


DEORBIT: 

3/1R 

ATO: 

3/1R 


LANDING/ SAF1NG: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC363-0025-0001 


CAUSES: BROKEN WIRE, THERMOSTAT FAIL OPEN, SHORT CIRCUIT, 

INSTALLATION ERROR 


EFFECTS/RATTONALE s 

LOSS OF REDUNDANCY FOR HEATING FUEL TANK. IF BOTH HEATERS ARE 
LOST, FUEL CAN FREEZE AND APU MAY BE LOST. CRITICALITY IS 3/1R 
FOR DEORBIT: 2 FAILURES AWAY FROM CRITICAL (1 MORE HEATER + 1 
MORE APU). 


REFERENCES : 


REPORT DATE 12/10/86 


C-62 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/23/86 

SUBSYSTEM: AFU 

MDAC ID: 161 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL TANK HEATER THERMOSTAT (S11A, SUB, S21A, 

S21B, S31A, S31B) 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL TANK HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/1R 

ATO: 

3/IR 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME360-0017-0005 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANT FUEL TANK HEATERS. CRITICALITY IS 3/1R FOR 
DEORBIT: 2 FAILURES AWAY FROM CRITICAL (1 MORE HEATER + 1 MORE 
APU) . 


REFERENCES: 


REPORT DATE 12/10/86 


C-63 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/23/86 

SUBSYSTEM: APU 

MDAC ID: 162 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL TANK HEATER THERMOSTAT (S11A, SUB, S21A, 

S21B, S3 1A, S3 IB) 

FAILURE MODE: FAIL CLOSED 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 


1) 

APU 




2) 

FUEL SYSTEM 




3) 

FUEL TANK HEATER 




4) 

THERMOSTAT 




5) 





6) 





7) 





8) 





9) 







CRITICALITIES 



FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 


LIFTOFF: 

3/3 

TAL: 

3/3 


ONORBIT: 

3/3 

AOA: 

3/3 


DEORBIT: 

3/3 

ATO: 

3/3 


LANDING/ SAFING: 

3/3 




REDUNDANCY SCREENS: A [ 1 ] B [NA ] C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: ME3 60-0017-0005 


CAUSES: SHORT, WELDED CONTACTS 

EFFECTS/RATIONALE : 

AFFECTED HEATER SET (A OR B) IS FAILED ON WHEN ACTIVE, BUT CAN BE 
SWITCHED OFF. 


REFERENCES : 


REPORT DATE 12/10/86 


C-64 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

9/23/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

3/1R 

MDAC ID: 

163 

ABORT: 

3/1R 

ITEM: 

FUEL LINE 

HEATER 


FAILURE MODE 

!: FAIL OFF, 

OR LOW OUTPUT 


LEAD ANALYST 

': J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL LINE HEATER 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AOA: • 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/1R 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

c [ p ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: BROKEN WIRE, THERMOSTAT FAILED OPEN, SHORT CIRCUIT, 

INSTALLATION ERROR 

EFFECTS/RATIONALE : 

LOSS OF REDUNDANCY FOR HEATING FUEL LINES. IF BOTH HEATERS LOST, 
FUEL CAN FREEZE AND APU MAY BE LOST. CRITICALITY IS 3/1R FOR 
DEORBIT: 2 FAILURES AWAY FROM CRITICAL (1 MORE HEAT + 1 MORE 
APU) . 


REFERENCES : 


REPORT DATE 12/10/86 


C-65 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/23/86 

SUBSYSTEM: AFU 

MDAC ID: 164 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL LINE HEATER THERMOSTAT 

(S16A,S16B,S112A, S112B, S11A, SUB, S26A, S26B, S212A, S212B, S21A, S21B, 
S36A, S36B, S312A, S312B, S31A, S31B) 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL LINE HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/1R 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

c [ p ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME360-OQ17-OOOX 


CAUSES: CONTAMINATION 


EFFECTS /RATIONALE • “ : 

LOSS OF REDUNDANT FUEL LINE HEATERS. CRITICALITY IS 3/1R FOR 
DEORBIT: 2 FAILURES AWAY FROM CRITICAL (1 MORE HEATER + 1 MORE 
APU) . 


REFERENCES : 


REPORT DATE 12/10/86 


C-66 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/23/86 

SUBSYSTEM: APU 

MDAC ID: 165 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL LINE HEATER THERMOSTAT 

(S16A, S16B, S112A, S112B, S11A, SUB, S26A, S26B,S212A, S212B, S21A, S21B, 
S36A, S36B, S312A, S312B, S31A, S3 IB) 

FAILURE MODE: FAIL CLOSED 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL LINE HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] 


C [NA ] 


LOCATION: 
PART NUMBER: 


AFT COMPARTMENT 
ME360-OQ17-OOOX 


CAUSES: SHORT, WELDED CONTACTS 


EFFECTS/RATIONALE : 

AFFECTED HEATER SET (A OR B) IS FAILED ON WHEN ACTIVE, BUT CAN BE 
SWITCHED OFF. 


REFERENCES : 


REPORT DATE 12/10/86 


C-67 



INDEPENDENT ORBITER ASSESSM ENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/24/86 

SUBSYSTEM: AFU 

MDAC ID: 166 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL LINE HEATER THERMOSTAT (REDUNDANT) 

(S19A,S19B,S14A,S14B,S29A,S29B/S24A,S24B,S39A,S39B,S34A,S34B) 
FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL LINE HEATER 

4) THERMOSTAT (REDUNDANT) 

5) 

«) 

7) 

8 ) 

8 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 




REDUNDANCY SCREENS: A [ 1 ] B [NA ] C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: ME360-OQ17-OOOX 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE: 

NO EFFECT EXCEPT LOSS OF THERMOSTAT REDUNDANCY. CRITICALITY IS 
3/1R FOR DEORBIT: IF ALL THERMOSTATS FAIL OPEN, FUEL LINES CAN 
FREEZE, POSSIBLY LEADING TO FREEZING AND FUEL LEAK. 


REFERENCES: 


REPORT DATE 12/10/86 


C-68 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

9/24/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 


FLIGHT: 

3/3 

MDAC ID: 

167 


ABORT: 

3/3 

ITEM: 

FUEL LINE 

HEATER THERMOSTAT 

(REDUNDANT) 



(S19A,S19B,S14A,S14B,S29A,S29B,S24A,S24B,S39A,S39B, S34A, S34B) 
FAILURE MODE: FAIL CLOSED 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL LINE HEATER 

4) THERMOSTAT (REDUNDANT) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME360-OQ17-OOOX 


CAUSES: SHORT, WELDED CONTACTS 

EFFECTS/RATIONALE : 

AFFECTED HEATER SET (A OR B) IS FAILED ON WHEN ACTIVE, BUT CAN BE 
SWITCHED OFF. 


REFERENCES: 


REPORT DATE 12/10/86 


C-69 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 9/24/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 3/1R 

MDAC ID: 168 ABORT: 3/1R 

ITEM: FUEL PUMP SEAL CAVITY DRAIN LINE HEATER 

FAILURE MODE: FAIL OFF, OR LOW OUTPUT 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP SEAL CAVITY DRAIN LINE HEATER 

4) 

5) 

6 ) 

7) 

8 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/1R 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC3 63-0026-0007 


CAUSES: BROKEN WIRE, THERMOSTAT FAILED OPEN, SHORT CIRCUIT, 

INSTALLATION ERROR 

EFFECTS/RATIONALE : 

LOSS OIL REDUNDANCY FOR HEATING SEAL CAVITY DRAIN LINE . IF FUEL 
HAS LEAKED INTO DRAIN LINE, AND BOTH HEATERS ARE LOST, FUEL CAN 
FREEZE AND BLOCK DRAIN. ANY REWARMING COULD RUPTURE LINE AND 
CAUSE FUEL LEAK. 

CRITICALITY IS 3/1R FOR DEORBIT: 2 FAILURES AWAY FROM CRITICAL (1 
MORE HEATER + 1 MORE APU). 


REFERENCES: 


REPORT DATE 12/10/86 


C-70 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/24/86 

SUBSYSTEM: AFU 

MDAC ID: 169 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP SEAL CAVITY DRAIN LINE HEATER THERMOSTAT 

(S112A, S112B, S212A, S212B, S312A, S312B) 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP SEAL CAVITY DRAIN LINE HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 




REDUNDANCY SCREENS: A [ 1 ] B [NA ] C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: ME3 60-0017-0008 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF REDUNDANT HEATER FOR HEATING DRAIN LINE. IF BOTH HEATERS 
ARE LOST, FUEL CAN FREEZE AND APU MAY BE LOST. CRITICALITY IS 
3/1R FOR DEORBIT: 2 FAILURES AWAY FROM CRITICAL (1 MORE HEATER + 

1 MORE APU) . 


REFERENCES : 


REPORT DATE 12/10/86 


C-71 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/26/86 

SUBSYSTEM: AFU 

MDAC ID: 170 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: FUEL PUMP SEAL CAVITY DRAIN LINE HEATER THERMOSTAT 

(S112A, S112B, S212A, S212B, S312A, S312B) 

FAILURE MODE: FAIL CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP SEAL CAVITY DRAIN LINE HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/1R 

AOA: 

3/3 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME3 60-0017-0008 


CAUSES: SHORT, WELDED CONTACTS 


EFFECTS/RATIONALE : 

HEATER STUCK ON; IF FUEL IS PRESENT IN LINE, IT WILL OVERHEAT AND 
DETONATE BEFORE FDA ALARM. FUEL LEAK - FIRE HAZARD. CRITICALITY 
IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES: ROCKWELL INTERNATIONAL RECOMMENDED CIL CHANGE 6-13- 

86 (CIL 1219.2). ROCKWELL INTERNATIONAL PRESENTATION "APU DRAIN 
LINE HEATER SAFETY CONCERN", PRESENTED BY J.L. SCHAEFER, JUNE 
1986. 


REPORT DATE 12/10/86 


C-72 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

9/24/86 HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

3/1R 

MDAC ID: 

171 

ABORT: 

3/1R 

ITEM: 

FUEL PUMP/VALVE HEATER 



FAILURE MODE: FAIL OFF, OR LOW OUTPUT 



LEAD ANALYST: J. BARNES SUBSYS LEAD: 

J. BARNES 


BREAKDOWN 

HIERARCHY: 




1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP HEATER 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/1R 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

c [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: BROKEN WIRE, THERMOSTAT FAILED OPEN, SHORT CIRCUIT 

INSTALLATION ERROR 


r 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANCY FOR HEATING FUEL PUMP AND FUEL VALVES. IF 
BOTH HEATERS ARE LOST, FUEL CAN FREEZE AND APU MAY BE LOST. 
CRITICALITY IS 3/1R FOR DEORBIT: 2 FAILURES AWAY FROM CRITICAL (1 
MORE HEATER + 1 MORE APU). 


REFERENCES : 


REPORT DATE 12/10/86 


C-73 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 9/24/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 3/1R 

MDAC ID: 172 ABORT: 3/1R 

ITEM: FUEL PUMP/ VALVE HEATER THERMOSTAT 

(S17A, S17B, S27A,S27B, S37A, S37B) 

FAILURE MODE: FAIL OPEN 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP/ VALVE HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


CRITICALITIES 
HDW/FUNC ABORT 


3/2R 

3/3 

3/1R 

3/1R 


RTLS: 

TAL: 

AOA: 

ATO: 


LANDING/SAFING: 3/1R 


HDW/FUNC 

3/3 

3/3 

3/3 

3/1R 


REDUNDANCY SCREENS: A [ 1 ] B [NA ] C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME360-0017-0001 


CAUSES: CONTAMINATION 


EFFECTS/ RATIO NALE : 

LOSS O F RE DUNDANT HEATERS F OR F UEL PUMP AND FUEL VALVES wr 
CRITICALITY IS 3/1R FOR DEORBIT: 2 FAILURES AWAY FROM CRITICAL (1 
MORE HEATER + 1 MORE APU). 


REFERENCES: 


REPORT DATE 12/10/86 


C-74 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/24/86 

SUBSYSTEM: AFU 

MDAC ID: 173 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL PUMP/ VALVE HEATER THERMOSTAT 

(S17A,S17B,S27A,S27B,S37A,S37B) 

FAILURE MODE: FAIL CLOSED 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL PUMP/ VALVE HEATER 

4) THERMOSTAT 

5 ) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME360-0017-0001 


CAUSES: SHORT, WELDED CONTACTS 


EFFECTS/RATIONALE : 

AFFECTED HEATER SET (A OR B) IS FAILED ON WHEN ACTIVE, BUT CAN BE 
SWITCHED OFF. 


REFERENCES: 


REPORT DATE 12/10/86 


C-75 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC ID; 


9/08/86 

APU 

174 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT; 2/1R 

ABORT; 1/1 


ITEM; 

FAILURE MODE: 


FUEL IN-LINE FILTER 
BLOCKAGE 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL IN-LINE FILTER 

4) 

5) 

6 ) 

7) 

8 ) 

9) 



CRITICALITIES 


GOT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/IR 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/IR 

ATO: 

1/1 

LANDING/SAFING: 

2/IR 




REDUNDANCY SCREENS: A [ 1 ] B [ P ] 


C[P] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC286-0051-0001 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

LOSS OF APU IF BLOCKAGE IS SEVERE ENOUGH. CRITICALITY IS 2/1R 
DUE TO LOSS OF ONE APU. ABORT: CRITICALITY IS 1/1 FOR ENGINE- 

OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN ENGINE. ~ 


REFERENCES: 


REPORT DATE 12/10/86 


C-76 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


9/09/86 

APU 

175 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: 

FAILURE MODE: 


FUEL IN-LINE FILTER 
EXTERNAL LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) FUEL IN-LINE FILTER 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 

1/1 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: 
PART NUMBER: 


AFT COMPARTMENT 
MC28 6-0 051-0001 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE 


EFFECTS/RATIONALE : 

1) LOSS OF FUEL-LOSS OF ONE APU. 2) FUEL IN AFT COMPARTMENT-FIRE 
HAZARD. CRITICALITY IS 1/1 DUE TO FIRE HAZARD. 


REFERENCES: 


REPORT DATE 12/10/86 


C-77 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/25/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 2/1R 

MDAC ID: 176 ABORT: 2/1R 

ITEM: FUEL IN-LINE FILTER 

FAILURE MODE: FAILS OPEN-NO FILTERING 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 

HIERARCHY: 

1) 

APU 


2) 

FUEL 

SYSTEM 

3) 

FUEL 

IN-LINE FILTER 

4) 



5) 



6) 



7) 



8) 



9) 




CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3' 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 

- : 


REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION : AFT COMPARTMENT 

PART NUMBER: MC286-0051-0001 


CAUSES : MANUFACTURING ERROR , F ATIGUE FAILURE 

EFFECTS/RATIONALE : 

POSSIBLE INGESTION OF CONTAMINANTS INTO FUEL ISOLATION VALVES AND 
FUEL PUMP. THIS CONTAMINATION COULD CAUSE LOSS OF AFU. - 
CRITICALITY IS 3/IR DUE TO LOSS OF APU IF CONTAMINATION IS 
PRESENT. ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS DUE 

TO POSSIBLE LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-78 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/25/86 

APU 

177 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: SEAL CAVITY DRAIN LINE 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SEAL CAVITY DRAIN LINE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ F ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465XXX 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE 


EFFECTS/RATIONALE : 

ONE FAILURE AWAY FROM FUEL IN AFT COMPARTMENT (FUEL PUMP SEAL 
LEAK). FUEL IN AFT COMPARTMENT IS FIRE HAZARD. CRITICALITY IS 
2/1R. 


REFERENCES : 


REPORT DATE 12/10/86 


C-79 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/25/86 

APU 

178 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: SEAL CAVITY DRAIN FLEX HOSE 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SEAL CAVITY DRAIN LINE 

4) FLEX HOSE 

5) 

6 ) 

7) 

3) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 2 1 

B [ F ] 

C [ F ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME271-0079-560X 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, FATIGUE WEAR 


EFFECTS/RATIONALE : 

ONE FAILURE AWAY FROM FUEL IN AFT COMPARTMENT (FUEL PUMP SEAL 
LEAK). FUEL IN AFT COMPARTMENT: FIRE HAZARD. CRITICALITY IS 
2/1R. 


REFERENCES: 


REPORT DATE 12/10/86 


C-80 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/04/86 

AFU 

179 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: SEAL CAVITY DRAIN LINE 

FAILURE MODE: BLOCKAGE 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SEAL CAVITY DRAIN LINE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465XXX 


CAUSES: WAX FORMED BY MIXING OF LUBE OIL AND HYDRAZINE 

EFFECTS/RATIONALE: 

IN CASE OF A GROSS FUEL LEAK INTO THE SEAL CAVITY, SEAL CAVITY 
COULD BE OVERPRESSURIZED AND HYDRAZINE COULD BE FORCED INTO THE 
GEARBOX. THIS COULD LEAD TO GEARBOX DAMAGE DUE TO INADEQUATE 
LUBRICATION. CRITICALITY IS 3/1R (1 FAILURE AWAY FROM APU LOSS). 
ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 

LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-81 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 10/30/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 2/1R 

MDAC ID: 180 ABORT: 2/1R 

ITEM: SEAL CAVITY DRAIN RELIEF VALVE 

FAILURE MODE: LOW CRACKING PRESSURE 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SEAL CAVITY DRAIN RELIEF VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/lR 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/lR 

LANDING/SAFING: 

3/3 


~ 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME2 84-0544-0002 


CAUSES: CONTAMINA TION 

EFFECTS/RATIONALE : 

LEAKI NG FUEL WILL RELIEVE OVERBOARD AT LOWER PRESSURE; SOME FUEL 
COULD BE INGESTED INTO AFT COMPARTMENT THROUGH VENT DOORS DURING 
ENTRY (FIRE HAZARD) . CRITICALITY IS 2/1R FOR ENTRY DUE TO FIRE 
HAZARD (1 FAILURE AWAY). 


REFERENCES: 


REPORT DATE 12/10/86 


C-82 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

APU 

181 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: SEAL CAVITY DRAIN RELIEF VALVE 

FAILURE MODE: FAILS TO RESEAT (FAILS OPEN), LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SEAL CAVITY DRAIN RELIEF VALVE 

4) 

5) 

6) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/3 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOAt 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B ( P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0544-0002 


CAUSES: CONTAMINATION, VIBRATION, MECHANICAL SHOCK, 

MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

LOSS OF SEAL CAVITY LEAK DETECTION, IF VALVE FAILS OPEN BEFORE 
LEAK STARTS. SOME FUEL COULD BE INGESTED INTO AFT COMPARTMENT 
THROUGH VENT DOORS DURING ENTRY (FIRE HAZARD). CRITICALITY IS 
2/1R FOR ENTRY DUE TO FIRE HAZARD (1 FAILURE AWAY). 


REFERENCES : 


REPORT DATE 12/10/86 


C-83 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/25/86 

SUBSYSTEM: AFU 

MDAC ID: 182 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: SEAL CAVITY DRAIN RELIEF VALVE 

FAILURE MODE: FAILS CLOSED; FAILS TO RELIEVE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SEAL CAVITY DRAIN RELIEF VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/Ir 

ONORBIT: 

3/3 

AO A: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0544-0002 


CAUSES : CONTAMINATION, MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

IN CASE OF A GROSS FUEL LEAK INTO THE SEAL CAVITY, HYDRAZINE 
COULD B E FORCE D INTO THE LUBE OIL SYSTE M; R ESULT COULD BE LOSS OF 
APU. CRITICALITY IS 3/1R: TWO FAILURES AWAY FROM CRITICAL (FUEL 
LEAK + ANOTHER APU). 

ABORT: CRITICALITY IS 2/ 1R FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 
LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-84 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/25/86 

AFU 

183 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: SEAL CAVITY DRAIN RELIEF VALVE 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 

1) APU 

2) FUEL 

3) SEAL 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


HIERARCHY: 

SYSTEM 

CAVITY DRAIN LINE RELIEF VALVE 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ F ] 

C [ F ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0544-0002 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR 


EFFECTS/RATIONALE : 

IF FUEL LEAKS INTO SEAL CAVITY, RESULT WILL BE FUEL IN AFT 
COMPARTMENT (FIRE HAZARD). CRITICALITY IS 2/1R: 1 FAILURE AWAY 
FROM CRITICAL SITUATION. 


REFERENCES : 


REPORT DATE 12/10/86 


C-85 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSY STEM: 
MDAC ID: 


11/25/86 

APU 

184 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: SEAL CAVITY DRAIN CATCH BOTTLE 

FAILURE MODE: LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SEAL CAVITY DRAIN CATCH BOTTLE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465232 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE 


EFFECTS/RAT IONALE : 

A FUEL PUMP FACE SEAL LEAK WILL RESULT IN FUEL IN THE AFT 
COMPARTMENT, IF THE CATCH BOT TLE LEAKS. THIS CREATES A FIRE 
HAZARD. CRITICALITY IS 2/1R: 1 FAILURE AWAY FROM CRITICAL (FUEL 
PUMP FACE SEAL LEAK). 


REFERENCES : 


REPORT DATE 12/10/86 


C-86 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


9/17/86 

APU 

185 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: 

FAILURE MODE: 


SEAL CAVITY DRAIN CATCH BOTTLE DRAIN VALVE 
LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SEAL CAVITY DRAIN CATCH BOTTLE 

4) DRAIN VALVE 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/1R 

LIFTOFF: 

3/1R 

TAL: 

3/1R 

ONORBIT: 

3/1R 

AOA: 

3/1R 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B t F ] 

C [ F 3 


LOCATION: 
PART NUMBER: 


AFT COMPARTMENT 
ME284-0543-0002 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, CONTAMINATION 

EFFECTS/RATIONALE : 

IF FUEL PRESENT IN CATCH BOTTLE, FUEL WILL LEAK PAST VALVE BUT 
WILL BE STOPPED BY CAP ON DRAIN LINE. CRITICALITY IS 3/1R DUE TO 
CAP ON LINE. WITHOUT CAP, IT WOULD ALLOW FUEL TO LEAK INTO AFT 
COMPARTMENT-FIRE HAZARD. 


REFERENCES : 


REPORT DATE 12/10/86 


C-87 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


9/17/86 

AFU 

186 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: 

FAILURE MODE: 


SEAL CAVITY DRAIN CATCH BOTTLE DRAIN VALVE 
FAILS CLOSED 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL SYSTEM 

3) SEAL CAVITY DRAIN CATCH BOTTLE 

4) DRAIN VALVE 

5 ) 

6 ) 

7) 

8 ) 

9 ) 


FLIGHT PHASE 


CRITICALITIES 

HDW/FUNC ABORT HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: A 

[NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0543-0002 

CAUSES: CONTAMINATION, CORROSION 


EFFECTS/RATIONALE : 

CAN'T DO SEAL CAVITY DRAIN SERVICING; POSSIBLE LAUNCH DELAY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-88 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/15/86 

SUBSYSTEM: APU 

MDAC ID: 187 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: LUBE OIL PUMP 

FAILURE MODE: NO OUTPUT OR LOW OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL PUMP 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 . 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: LOSS OF INPUT POWER, INTERNAL LEAKAGE, JAMMING OR 

BINDING, INSUFFICIENT LUBE OIL IN GEARBOX (SERVICING ERROR) 

EFFECTS/RATIONALE : 

LOSS OF LUBRICATION TO APU GEARBOX; GEARBOX WILL OVERHEAT AND 
WILL BE DAMAGED; APU WILL BE LOST. CRITICALITY IS 2/1R DUE TO 
LOSS OF APU. ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS 

DUE TO POSSIBLE LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-89 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 9/17/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 3/1R 

MDAC ID: 188 ABORT: 2/1R 

ITEM: GEARBOX GN2 BOTTLE 

FAILURE MODE: LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) GEARBOX GN2 BOTTLE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 

-- -~- 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE 

EFFECTS /RATIONALE: 

LOSS OF GN2 TO REPRESSURIZE GEARBOX. IF GEARBOX LOSES GN2, APU 
WILL BE LOST. CRITICALITY IS 3 /1R: 2 FAILU RES AWAY F ROM . .. . 
CRITICALITY 1. ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS 

DUE TO POSSIBLE LOSS OF ANOTHER MAIN ENGINE IF ONE APU IS LOST. 


REFERENCES : 


REPORT DATE 12/10/86 


C-90 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/17/86 

SUBSYSTEM: AFU 

MDAC ID: 189 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: GEARBOX GN2 BOTTLE 

FAILURE MODE: RUPTURE AT OPERATING PRESSURE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) GEARBOX GN2 

4) 

5) 

6) 

7) 

8) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

3/3 

AO A: 

1/1 

DEORBIT: 

LANDING/SAFING: 

1/1 
• 1/1 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: HANDLING DAMAGE 

EFFECTS/RATIONALE : 

1) LOSS OF GN2 TO PRESSURIZE GEARBOX. 2) POSSIBLE SHRAPNEL 
DAMAGE TO APU'S AND OTHER AFT COMPARTMENT EQUIPMENT. POSSIBLE 
FUEL LEAK AND FIRE HAZARD. CRITICALITY IS 1/1 DUE TO SHRAPNEL 
DAMAGE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-91 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/17/86 

SUBSYSTEM: APU 

MDAC ID: 190 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: GEARBOX GN2 BOTTLE FILL COUPLING 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) GN2 BOTTLE 

4) FILL COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A t 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME276-0032-0003 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF GN2 TO REPRESSURIZE GEARBOX. IF GEARBOX LOSES GN2, APU 
WILL BE LOST. CRITICALITY IS 3/ 1R: 2 FAILU RES AWAY FROM 

CRITICALITY 1. ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS 

DUE TO POSSIBLE LOSS OF ANOTHER MAIN ENGINE IF ONE APU IS LOST. 


REFERENCES : 


REPORT DATE 12/10/86 


C-92 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/17/86 

SUBSYSTEM: APU 

MDAC ID: 191 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: GEARBOX GN2 BOTTLE FILL COUPLING 

FAILURE MODE: FAILS CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) GN2 BOTTLE 

4) FILL COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/S AFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME276-0032-0003 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

CANNOT SERVICE GN2 BOTTLE-POSSIBLE LAUNCH DELAY. 


REFERENCES : 


REPORT DATE 12/10/86 C-93 


HDW/FUNC 

3/3 

3/3 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 9/17/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 3/1R 

MDAC ID: 192 ABORT: 2/1R 

ITEM: GEARBOX PRESSURIZATION VALVE 

FAILURE MODE: FAILS TO OPEN, FAILS TO REMAIN OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) GEARBOX PRESSURIZATION VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

c [ p ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 

. 



CAUSES: LOSS OF INPUT SIGNAL, CONTAMINATION, CORROSION 

EFFECTS/RATIONALE : 

LOSS OF GN2 TO REPRESSURIZE GEARBOX. IF GEARBOX LOSES GN2 , APU 
WILL BE LOST. CRITICALITY IS 3/1R BECAUSE SITUATION IS 2 
FAILURES AWAY FROM CRIT 1 (GEARBOX LEAK & APU LOSS) 

ABORT: CRITICALITY IS 2/1R FOR ENGINE -OUT ABORTS DUE TO POSSIBLE 

LOSS OF ANOTHER MAIN ENGINE IF ONE APU IS LOST. 


REFERENCES: NO DESIGN DATA WAS OBTAINED FOR THIS VALVE. 


REPORT DATE 12/10/86 


C-94 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/17/86 

SUBSYSTEM: APU 

MDAC ID: 193 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: GEARBOX PRESSURIZATION VALVE 

FAILURE MODE: FAILS TO CLOSE (REMAINS OPEN) 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) GEARBOX PRESSURIZATION VALVE 

4 ) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

• LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 

CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

IF VALVE OPENS, IT WILL STAY OPEN AND OVERPRESSURIZE GEARBOX. IF 
GEARBOX LEAKS OUT ALL GN2, APU WILL BE LOST. CRITICALITY IS 
3/1R: 2 FAILURES AWAY FROM CRITICALITY 1 (GEARBOX LEAK AND 

ANOTHER APU LOST). 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 
LOSS OF ANOTHER MAIN ENGINE IF ONE APU IS LOST. 


REFERENCES: NO DESIGN DATA WAS OBTAINED FOR THIS VALVE. 


REPORT DATE 12/10/86 


C-95 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/17/86 

SUBSYSTEM: AFU 

MDAC ID: 194 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: GEARBOX PRESSURIZATION VALVE 

FAILURE MODE: INTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) GEARBOX PRESSURIZATION VALVE 

4) 

5) 

6 ) 

7) 

3) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c [ p ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT, HANDLING DAMAGE 

EFFECTS/RATIONALE: 

GN2 BOTTLE LEAKS INTO GEARBOX? A SUBSEQUENT GEARBOX LEAK, IF IT 
DEPLETES THE GEARBOX, WILL CAUSE LOSS OF AN APU. CRITICALITY IS 
3/1R BECAUSE SITUATION IS 2 FAILURES AWAY FROM CRIT 1 (GEARBOX 
LEAK AND APU LOSS) . 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 

LOSS OF ANOTHER MAIN ENGINE IF ONE APU IS LOST. 


REFERENCES: NO DESIGN DATA WAS OBTAINED FOR THIS VALVE. 


REPORT DATE 12/10/86 


C-96 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/25/86 

SUBSYSTEM: AFU 

MDAC ID: 195 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: GEARBOX PRESSURIZATION VALVE 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) GEARBOX PRESSURIZATION VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

2/1R 

AO A: 

2/1R 

ATO: 

2/1R 



HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY SCREENS: A[l] B[P] C[P] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, INSTALLATION 

ERROR 


EFFECTS/RATIONALE : 

POSSIBLE LOSS OF GN2 FROM GEARBOX; IF LEAK DEPLETES GN2 BOTTLE, 
APU WILL BE LOST. CRITICALITY IS 2/1R DUE TO LOSS OF ONE APU. 
ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 

LOSS OF ANOTHER MAIN ENGINE FOR APU LOSS. 


REFERENCES: NO DESIGN DATA WAS OBTAINED FOR THIS VALVE. 


REPORT DATE 12/10/86 


C-97 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/25/86 

SUBSYSTEM: AFU 

MDAC ID: 196 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: GEARBOX PRESSURIZATION VALVE 

FAILURE MODE: BARRIER LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) GEARBOX PRESSURIZATION VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 


CRIT ICALITIES 


FLIGHT PHASE 

HDW/FUHC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 4 ] 

B [ F ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUS ES? MANUFACTURING DEFECT , 

EFFECTS/RATIONALE : 

NO EFFECT; VALVE COMPONENTS ARE COMPATIBLE WITH GN2. 


REFERENCES: NO DESIGN DATA WAS OBTAINED FOR THIS VALVE. 


REPORT DATE 12/10/86 C-98 


HDW/FUNC 

3/3 

3/3 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/15/86 

SUBSYSTEM: APU 

MDAC ID: 197 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: LUBE OIL LINES 

FAILURE MODE: LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c t P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465XXX 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, INSTALLATION 

ERROR 


EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL. 2) LOSS OF APU DUE TO GEARBOX FAILURE. 
CRITICALITY IS 2/1R DUE TO LOSS OF ONE APU. ABORT: CRITICALITY 

IS 1/1 FOR ENGINE-OUTS ABORTS DUE TO POSSIBLE LOSS OF ANOTHER 
MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-99 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/15/86 

SUBSYSTEM: AFU 

MDAC ID: 198 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: LUBE OIL LINE FLEX HOSES 

FAILURE MODE: LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORSIT: 
DEORBIT: 
LANDING/SAFING: 


HDW/FUNC 

3/3 

2/1R 

2/1R 

2/1R 

2/1R 


CRITICALITIES 

ABORT 
RTLS: 
TAL: 
AOA: 
ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY SCREENS: A [ 1 ] 


B [ P ] 


C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME271-0079-410X 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, HEATER BURN- 

THROUGH 

EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL. 2) LOSS OF APU DUE TO GEARBOX FAILURE. 
CRITICALITY IS 2/1R DUE TO LOSS OF ONE APU. ABORT: CRITICALITY 

IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN 
ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-lOO 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/15/86 

SUBSYSTEM: APU 

MDAC ID: 199 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: GEARBOX FILL COUPLING 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) GEARBOX FILL COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R • 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC621-0038-0500 


CAUSES: INSTALLATION ERROR, MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL. 2) LOSS OF APU DUE TO GEARBOX FAILURE. 
CRITICALITY IS 2/1R DUE TO LOSS OF APU. ABORT: CRITICALITY IS 

1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN 
ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-101 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/16/86 

SUBSYSTEM: APU 

MDAC ID: 200 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: GEARBOX FILL COUPLING 

FAILURE MODE: FAILS CLOSED 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) GEARBOX FILL COUPLING 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 




REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC621-0038-0500 


CAUSES: CONTAMINATION, CORROSION, FILTER BLOCKED 

EFFECTS/RATIONALE : 

CANNOT SERVICE GEARBOX-POSSIBLE LAUNCH DELAY. 


REFERENCES: 


C-102 


REPORT DATE 12/10/86 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/16/86 

SUBSYSTEM: APU 

MDAC ID: 201 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: GEARBOX HIGH POINT VENT COUPLING 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) GEARBOX HIGH POINT VENT COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AO A: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 


REDUNDANCY SCREENS: 

A [ 1 ] 

B[P] 

C C p ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC621-0038-0500 


CAUSES: INSTALLATION ERROR, MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL. 2) LOSS OF APU DUE TO GEARBOX FAILURE. 
CRITICALITY IS 2/1R DUE TO LOSS OF APU. ABORT: CRITICALITY IS 

1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN 
ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-103 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 9/16/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 3/3 

MDAC ID: 202 ABORT: 3/3 

ITEM: GEARBOX HIGH POINT VENT COUPLING 

FAILURE MODE: FAILS CLOSED 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) GEARBOX HIGH POINT VENT COUPLING 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE HDW/FUNC 

PRELAUNCH: 3/3 

LIFTOFF: 3/3 

ONORBIT: 3/3 

DEORBIT: 3/3 

' LANDING/SAFING: 3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY SCREENS: A [NA ] 

B [NA ] 

C [NA ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC621-0038-0500 




CAUSES: CONTAMINATION, CORROSION, FILTER BLOCKED 

EFFECTS/RATIONALE : 

CANNOT PURGE GEARBOX-POSSIBLE LAUNCH DELAY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-104 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/30/86 

SUBSYSTEM: APU 

MDAC ID: 203 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: GEARBOX CHIP DETECTOR 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) CHIP DETECTOR 

4) 

5) 

6 ) 

7) 

3) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 

• 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: TBD 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR 


EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL. 2) LOSS OF APU DUE TO GEARBOX FAILURE. 
CRITICALITY IS 2/1R DUE TO LOSS OF APU. ABORT: CRITICALITY IS 

1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN 
ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-105 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/26/86 

SUBSYSTEM: AFU 

MDAC ID: 204 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: GEARBOX LOW POINT DRAIN COUPLING 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) GEARBOX LOW POINT DRAIN COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 


C RIT ICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: ' 

1/1 

LANDING/SAFING: 

2/1R 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC621-0038-0500 




CAUSES: CONTAMINATION, MANUFACTURING DEFECT, HANDLING DAMAGE 

EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL. 2) LOSS OF APU DUE TO GEARBOX FAILURE. 
CRITICALITY IS 2/1R DUE TO LOSS OF APU. ABORT: CRITICALITY IS 

1/1 FOR ENGINE -OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN 
ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-106 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/26/86 

SUBSYSTEM: APU 

MDAC ID: 205 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: GEARBOX LOW POINT DRAIN COUPLING 

FAILURE MODE: FAILS CLOSED 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) GEARBOX LOW POINT DRAIN COUPLING 

5) 

6 ) 

7) 

0 ) 

9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] 


C [NA ] 


LOCATION: 
PART NUMBER: 


AFT COMPARTMENT 
MC62 1-003 8 -0500 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

CANNOT PERFORM LUBE OIL SERVICING; POSSIBLE LAUNCH DELAY. 


REFERENCES : 


REPORT DATE 12/10/86 C-107 


HDW/FUNC 

3/3 

3/3 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/26/86 

SUBSYSTEM: APU 

MDAC ID: 206 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: GEARBOX HIGH POINT DRAIN COUPLING 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) GEARBOX HIGH POINT DRAIN 

5) 

6 ) 

7) 

8 ) 

9 ) 


COUPLING 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1. 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

LANDING/SAFING: 

2/1R 

2/1R 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC621-0038-0300 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT, HANDLING DAMAGE 


EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL. 2) LOSS OF APU DUE TO GEARBOX FAILURE. 
CRITICALITY IS 2/1R DUE TO LOSS OF APU. ABORT: CRITICALITY IS 

1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN 
ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-108 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/26/86 

SUBSYSTEM: APU 

MDAC ID: 207 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: GEARBOX HIGH POINT DRAIN COUPLING 

FAILURE MODE: FAILS CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) GEARBOX HIGH POINT DRAIN COUPLING 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC621-0038-0300 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

CANNOT PERFORM LUBE OIL SERVICING; POSSIBLE LAUNCH DELAY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-109 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKS HE ET 

DATE: 9/26/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 2/1R 

MDAC ID: 208 ABORT: 1/1 

ITEM: WSB DRAIN COUPLING 

FAILURE MODE: EXTERNAL LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) WSB DRAIN COUPLING 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

All] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT, HANDLING DAMAGE 

EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL. 2) LOSS OF APU DUE TO GEARBOX FAILURE. 
CRITICALITY IS 2/1R DUE TO LOSS OF APU. ABORT: CRITICALITY IS 

1/1 FOR ENGINE OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN 
ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-110 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/26/86 

SUBSYSTEM: APU 

MDAC ID: 209 

ITEM: WSB DRAIN COUPLING 

FAILURE MODE: FAILS CLOSED 

LEAD ANALYST: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINES 

4) WSB DRAIN COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


SUBSYS LEAD 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 


HDW/FUNC 

3/3 

3/3 


J. BARNES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: 

CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

CANNOT PERFORM LUBE OIL SERVICING 


3/3 

A [NA ] 


B [NA ] 


POSSIBLE LAUNCH DELAY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-lll 



INDEPENDENT ORBITER ASSES3HENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/04/86 

APU 

210 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: LUBE OIL LINE HEATER (18A, 18B, 19A, 19B) 

FAILURE MODE: FAIL OFF, OR LOW OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINE HEATER 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/1R 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC363-0027-0Q0X 


CAUSES: BROKEN WIRE, SHORT CIRCUIT, INSTALLATION ERROR 

EFFECTS/RATIONALE: 

LOSS OF LUBE OIL LINE HEATER REDUNDANCY. IF BOTH SETS OF HEATERS 
ARE LOST, LUBE OIL CAN DROP BELOW 0 F; APU CANNOT BE STARTED 
SAFELY FOR ENTRY. CRITICALITY IS 3/1R, DUE TO HEATER AND APU 
REDUNDANCY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-112 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/04/86 

AFU 

211 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: LUBE OIL LINE HEATER THERMOSTAT (S18A,S18B) 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINE HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 




REDUNDANCY SCREENS: A [ 1 ] B [NA ] C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: ME3 60-0017-0007 

CAUSES: CONTAMINATION, PIECE-PORT STRUCTURAL FAILURE 

EFFECTS/RATIONALE : 

LOSS OF REDUNDANCY FOR HEATING APU LUBE OIL LINES. IF ALL 
HEATERS ARE LOST, LUBE OIL CAN DROP BELOW 0 F? APU CANNOT BE 
STARTED SAFELY FOR ENTRY. CRITICALITY IS 3/1R, DUE TO HEATER AND 
APU REDUNDANCY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-113 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/04/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 3/3 

MDAC ID: 212 ABORT: 3/3 

ITEM: LUBE OIL LINE HEATER THERMOSTAT 

FAILURE MODE: FAIL CLOSED 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL LINE HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

------ 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME3 60-0017-0007 


CAUSES: CONTAMINATION (SHORT) . 

EFFECTS/RATIONALE : 

ONE SET OF LUBE OIL HEATERS IS FAILED ON WHILE ACTIVE, BUT CAN BE 
SWITCHED OFF. 


REFERENCES : 


REPORT DATE 12/10/86 


C-114 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/26/86 

SUBSYSTEM: APU 

MDAC ID: 213 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: LUBE OIL FILTER 

FAILURE MODE: PLUGGED 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL FILTER 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c [ p ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: CONTAMINATION, FUEL OR NH3 LEAK INTO LUBE OIL 

EFFECTS/RATIONALE : 

LUBE OIL WILL BYPASS FILTER - LUBE OIL FLOW RATE WILL BE REDUCED; 
AND GEARBOX WILL HEAT-UP FASTER, BUT APU WILL NOT BE AFFECTED 
UNLESS CONTAMINATION PRESENT IN LUBE OIL DAMAGES GEARBOX (APU 
COULD BE LOST). 

CRITICALITY IS 3/lR:2 FAILURES AWAY FROM CRITICAL (CONTAMINATION 
+ ANOTHER APU). ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS 
SINCE LOSS OF ONE APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-115 



DATE: 

SUBSYSTEM: 
MDAC ID: 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


9/26/86 

APU 

214 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: 

FAILURE MODE: 


LUBE OIL FILTER 
FAILS OPEN/NO FILTERING 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL FILTER 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/S AFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B ( F ] 

C [ P ] 


LOCATION: 
PART NUMBER: 


AFT COMPARTMENT 
MC201-0001 


CAUSES: MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

NO EFFECT UNLESS CONTAMINATION IN LUBE OIL DAMAGES GEARBOX (APU 
COULD BE LOST). CRITICALITY IS 3/1R: 2 FAILU RES AWAY FROM ... 
CRITICAL (CONTAMINATION + ANOTHER APU) . ABORT: CRITICALITY IS 
2/1R FOR ENGINE-OUT ABORTS SINCE LOSS OF ONE APU CAN BE CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-116 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/29/86 

SUBSYSTEM: APU 

MDAC ID: 215 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: LUBE OIL FILTER 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) LUBE OIL FILTER 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

2/1R 

TAL: 

2/1R 

AOA: 

2/1R 

ATO; 

2/1R 



HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] 


C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: HANDLING DAMAGE, MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL. 2) LOSS OF APU DUE TO GEARBOX FAILURE. 
CRITICALITY IS 2/1R DUE TO LOSS OF APU. ABORT: CRITICALITY IS 
1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN 
ENGINE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-117 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/29/86 

SUBSYSTEM: AFU 

MDAC ID: 216 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: OIL FILTER BYPASS RELIEF VALVE 

FAILURE MODE: FAILS CLOSED 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) OIL FILTER BYPASS RELIEF VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/1R 

3/3 

3/1R 

3/1R 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

2/1R 

2/1R 

2/1R 

2/1R 


REDUNDANCY SCREENS: A [ 2 ] B [ F ] 


C [ P ] 


LOCATION; AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

NO EFFECT, UNLESS FILTER IS PLUGGED. IF SO, LOSS OF LUBE OIL 
CIRCULATION. APU WILL BE LOST. CRITICALITY IS 3/1R: 2 FAILURES 
AWAY FROM CRITICAL (PLUGGED FILTER + ANOTHER APU LOST) 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, SINCE LOSS OF 

ONE APU CAN BE CRITICAL. 


REFERENCES: NO DESIGN DATA WAS OBTAINED FOR THIS VALVE. 


C-118 


REPORT DATE 12/10/86 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/29/86 

SUBSYSTEM: AFU 

MDAC ID: 217 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: OIL FILTER BYPASS RELIEF VALVE 

FAILURE MODE: FAILS TO CLOSE (STUCK OPEN), OR FAILS OPEN, OR 

LEAKS 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) OIL FILTER BYPASS RELIEF VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R. 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A[2] 

B [ F ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT 

EFFECTS/RATIONALEl 

ALLOWS ANY CONTAMINATION PRESENT IN LUBE OIL TO ENTER GEARBOX. 
APU CAN BE LOST IF GEARBOX IS DAMAGED. CRITICALITY IS 3/1R: 2 
FAILURES AWAY FROM CRITICAL (CONTAMINATION + ANOTHER APU LOST). 
ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, 

SINCE LOSS OF ONE APU CAN BE CRITICAL. 


REFERENCES: NO DESIGN DATA WAS OBTAINED FOR THIS VALVE. 


REPORT DATE 12/10/86 


C-119 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

APU 

218 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: GEARBOX BYPASS RELIEF VALVE 

FAILURE MODE: FAILS CLOSED (FAILS TO RELIEVE) 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) . APU 

2 ) LUBE OIL SYSTEM 

3) GEARBOX BYPASS RELIEF VALVE 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 



CRITICALITIES 


CGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

IVM . /A 

ATO: 

3/3 


LANDING/SAFING: 3/3 

REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 

CAUSES: CONTAMINATION, MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

NO EFFECT, EXCEPT POSSIBLE INCREASE IN LUBE OIL PRESSURE. 


REFERENCES: NO DESIGN DATA WAS OBTAINED FOR THIS VALVE. 


HDW/FUNC 

3/3 

3/3 


REPORT DATE 12/10/86 


C-120 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

APU 

219 


HIGHEST CRITICALITY HDW/FXJNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: GEARBOX BYPASS RELIEF VALVE 

FAILURE MODE: FAILS OPEN, OR FAILS TO CLOSE, OR LEAKS 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) GEARBOX BYPASS RELIEF VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

ALLOWS LUBE OIL TO BYPASS GEARBOX; GEARBOX CAN OVERHEAT DUE TO 
INSUFFICIENT LUBRICATION - MAY HAVE TO SHUT DOWN APU. 
CRITICALITY IS 2/1R DUE TO LOSS OF APU. 

ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL. 


REFERENCES: 


NO DESIGN DATA WAS OBTAINED FOR THIS VALVE. 


REPORT DATE 12/10/86 


C-121 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/29/86 

SUBSYSTEM: APU 

MDAC ID: 220 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: LUBE OIL ACCUMULATOR (ADD-ON) 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) ACCUMULATOR 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRIT ICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c [ p ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL. 2) LOSS OF APU DUE TO GEARBOX FAILURE. 
CRITICALITY IS 2/1R DUE TO LOSS OF APU. - 

ABORT: CRITICALITY IS 1/1 FOR ENGINE -OUT ABORTS DUE TO POSSIBLE 

LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-122 


\i il kin 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

9/29/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 


FLIGHT: 

2/1R 

MDAC ID: 

221 


ABORT: 

1/1 

ITEM: 

LUBE OIL 

ACCUMULATOR (ADD-ON) 



FAILURE MODE: INTERNAL 

LEAK 



LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. 

BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) ACCUMULATOR 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B ( P ) 

c [ p ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-00 01 


CAUSES: MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL SYSTEM PRESSURE, AND REDUCED LUBE OIL FLOW 
RATE. 2) POSSIBLE LOSS OF APU DUE TO OVERHEATED GEARBOX. 
CRITICALITY IS 2/1R DUE TO LOSS OF APU. ABORT: CRITICALITY IS 

1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE LOSS OF ANOTHER MAIN 
ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-123 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/30/86 

SUBSYSTEM: AFU 

MDAC ID: 222 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: LUBE OIL ACCUMULATOR (INTEGRAL) 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) ACCUMULATOR 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

• 1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 

- - - - 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL. 2) LOSS OF APU DUE TO GEARBOX FAILURE. 
CRITICALITY IS 2 /1R DUE TO LOSS OF APU.' 1 

ABORT: CRITICALITY IS 1/i FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 

LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-124 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 9/30/86 

SUBSYSTEM: APU 

MDAC ID: 223 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: LUBE OIL ACCUMULATOR (INTEGRAL) 

FAILURE MODE: INTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) LUBE OIL SYSTEM 

3) ACCUMULATOR 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

1) LOSS OF LUBE OIL PRESSURE, AND REDUCED LUBE OIL FLOW RATE. 2) 
POSSIBLE IXDSS OF APU DUE TO OVERHEATED GEARBOX. CRITICALITY IS 
2/1R DUE TO LOSS OF APU. 

ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE 

LOSS OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-125 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

224 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: INJECTOR COOLING VALVE 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) VALVE 

4) 

5) 

6 ) 

7 ) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

... 


REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-20552-000X 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR 

EFFECTS/RATIONALE : 

LOSS OF INJECTOR COOLING WATER. CRITICALITY IS 1/1 FOR DEORBIT 
BEFORE APU COOLDOWN. APU STARTED HOT MAY CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-126 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

HDW/FUNC 
1/1 
1/1 


BREAKDOWN HIERARCHY; 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


DATE: 

SUBSYSTEM; 
MDAC ID: 


11/03/86 

APU 

225 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE MODE: 


INJECTOR COOLING VALVE 
INTERNAL LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

1/1 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

1/1 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0552-000X 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

DEPLETION OF INJECTOR COOLING WATER. CRITICALITY IS 1/1 FOR 
EMERGENCY DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT MAY CAUSE 
FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-127 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/03/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 2/1R 

MDAC ID: 226 ABORT: 2/1R 

ITEM: INJECTOR COOLING VALVE 

FAILURE MODE: FAIL TO OPEN, FAIL TO REMAIN OPEN 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

- - - 


REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: AFT COMPARTMENT 

. _ s 


PART NUMBER: ME284-0552-000X 

— ' ~ ’ --- 



CAUSES: CONTAMINATION, CORROSION, BROKEN WIRE, SHORTED COIL 

EFFECTS/RATIONALE : 

LOSS OF INJECTOR COOLING FOR ONE APU. CRITICALITY 2/1R FOR 
DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT COULD CAUSE FUEL TO 
DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-128 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

227 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: INJECTOR COOLING VALVE 

FAILURE MODE: FAIL TO CLOSE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) 

APU 

2) 

INJECTOR COOLING 

3) 

VALVE 

4) 


5) 


6) 


7) 


8) 


9) 



SYSTEM 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF:' 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0552-000X 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

DEPLETION OF INJECTOR COOLING WATER; NO MORE IS LIKELY TO BE 
NEEDED IN THIS CASE, SO LOSS OF WATER IS INCONSEQUENTIAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-129 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/03/86 

SUBSYSTEM: AFU 

MDAC ID: 228 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: INJECTOR COOLING VALVE 

FAILURE MODE: BARRIER FAILURE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0552-000X 


CAUSES: MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

SHORTING OF COIL; LOSS OF VALVE OPEN CAPABILITY. LOSS OF 
INJECTOR COOLING TO ONE APU. CRITICALITY IS 2/1R FOR DEORBIT 
BEFORE APU COOLDOWN. APU STARTED HOT COULD CAUSE FUEL TO 
DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-130 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

229 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: INJECTOR COOLING WATER TANK 

FAILURE MODE: EXTERNAL LEAK (WATER OR N2) 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER TANK 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

1/1 

ATO: 

■ LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

1/1 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME282-0100-0001 


CAUSES: MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

• LOSS OF INJECTOR COOLING CAPABILITY FOR HOT RESTART OF APU. 
CRITICALITY IS 1/1 FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED 
HOT COULD CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-131 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER syBSXi^K^^ YS ^ WORKSHEET ■_ 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

230 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: INJECTOR COOLING WATER TANK 

FAILURE MODE: DIAPHRAGM LEAK.,^ ___ 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER TANK 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEOfeBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

, , 


REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCA TIO N: AFT COMPARTMENT 

PART HUMBER: ME2 82-010 0-000 1 


CAUSES: MANUFACTURING DEFECT, HANDLING .DAMAGE 

EFFECTS/RATIONALE : 

MORE RAPID DEPLETION OF WATER PRESSURE DURING USE, BUT COOLING 
SHOULD BE SUFFICIENT. 


REFERENCES: 


REPORT DATE 12/10/86 


C-132 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

231 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: INJECTOR COOLING GN2 FILL COUPLING 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) GN2 FILL COUPLING 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

1/1 

3/3 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME276-0032-0009 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR, HANDLING 

DAMAGE 

EFFECTS/RATIONALE : 

LOSS OF TANK PRESSURE: LOSS OF INJECTOR COOLING CAPABILITY FOR 

HOT RESTART OF APU. CRITICALITY IS 1/1 FOR DEORBIT BEFORE APU 
COOLDOWN. APU STARTED HOT COULD CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-133 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

APU 

232 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: INJECTOR COOLING GN2 FILL COUPLING 

FAILURE MODE: FAIL CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) GN2 FILL COUPLING 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 

FLIGHT PHASE HDW/FUNC ABORT HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: A 

[NA ] 

B [NA ] 

C [NA 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME276-0032-0009 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

CANNOT SERVICE INJECTOR COOLING ■SYSTEM; POSSIBLE LAUNCH DELAY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-134 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

HDW/FUNC 
1/1 
1/1 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER LINES (MANIFOLD) 

4) 

5) 

6 ) 

7 ) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

1/1 

3/3 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: VO70-465521 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

233 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE MODE: 


INJECTOR COOLING WATER LINES (MANIFOLD) 
EXTERNAL LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


CAUSES: INSTALLATION ERROR, MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

LOSS OF INJECTOR COOLING WATER AND/OR FREEZE-UP OF LINE: LOSS OF 

COOLING FOR APU HOT RESTART. CRITICALITY 1/1 FOR DEORBIT BEFORE 
APU COOLDOWN. APU STARTED HOT MAY CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-135 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/03/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 1/1 

MDAC ID: 234 ABORT: 1/1 


ITEM: INJECTOR COOLING WATER LINES (MANIFOLD) 

FAILURE MODE: BLOCKAGE 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER LINES (MANIFOLD) 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

1/1 

3/3 

ATO: 

1/1 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465521 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

LOSS OF INJECTOR COOLING CAPABILITY FOR ONE APU, OR ALL 3 APU'S. 
CRITICALITY ^IS 1/1 FOR D gORB IT BEFO RE A PU COOLDOWN. APU STARTED 
HOT COULD CAUSE FUEL TO DITONATi: 


REFERENCES : 


REPORT DATE 12/10/86 


C-136 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/03/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 1/1 

MDAC ID: 235 ABORT: 1/1 

ITEM: INJECTOR COOLING WATER FILL COUPLING 

FAILURE MODE: EXTERNAL LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER LINES (MANIFOLD) 

4) FILL COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 



FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

. . 

PRELAUNCH: 

3/3 

RTLS: 

3/3 


LIFTOFF: 

3/3 

TAL: 

3/3 

— 

ONORBIT: 

3/3 

AOA: 

3/3 


DEORBIT: 

LANDING/SAFING: 

1/1 

3/3 

ATO: 

1/1 

— 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC621-0038-0100 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF INJECTOR COOLING WATER; LOSS OF COOLING FOR APU HOT 
RESTART. CRITICALITY IS 1/1 FOR DEORBIT BEFORE APU COOLDOWN. 
APU STARTED HOT COULD CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-137 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/03/86 

AFU 

236 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: INJECTOR COOLING WATER FILL COUPLING 

FAILURE MODE: FAIL CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER LINES (MANIFOLD) 

4) FILL COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC621-0038-0100 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

CANNOT SERVICE INJECTOR COOLING SYSTEM; POSSIBLE LAUN CH DELAY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-138 


INDEPENDENT ORBITER ASSESSMENT 
ORB I TER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

AFU 

237 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: INJECTOR COOLING WATER LINE-APU X 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 


1) 

APU 




2) 

INJECTOR COOLING 

SYSTEM 



3) 

WATER LINE-APU X 




4) 





5) 





6) 





7 ) 





8) 





9) 







CRITICALITIES 



FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 


LIFTOFF: 

3/3 

TAL: 

3/3 


ONORBIT: 

3/3 

AOA: 

3/3 


DEORBIT: 

2/1R 

ATO: 

2/1R 


LANDING/SAFING: 

3/3 




REDUNDANCY SCREENS: A [ 2 ] B[P] C [ F ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465521 

CAUSES: INSTALLATION ERROR, MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

LOSS OF INJECTOR COOLING AND/OR FREEZE-UP OF LINE; LOSS OF 
COOLING FOR HOT RESTART OF ONE APU. CRITICALITY IS 2/1R FOR 
DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT COULD CAUSE FUEL TO 
DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-139 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

238 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: INJECTOR COOLING WATER LINE-APU X 

FAILURE MODE: BLOCKAGE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER LINE-APU X 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/3 

2/1R 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

2/1R 

REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ F ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465521 



CAUSES: CONTAMINATION 


.... 



EFFECTS/RATIONALE : 

LOSS OF INJECTOR COOLING CAPABILITY FOR ONE APU. CRITICALITY IS 
2/1R FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT COULD ~ 


CAUSE 


REFERENCES: 


REPORT DATE 12/10/86 


C-140 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

11/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

2/1R 

MDAC ID: 

239 

ABORT: 

2/1R 

ITEM: 

INJECTOR 

COOLING WATER LINE FLEX HOSE 


FAILURE MODE: LEAK 

LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER LINE - APU X 

4) FLEX HOSE 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 

' 


REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ F ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME271-0079-6401 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, INSTALLATION 

ERROR, FATIGUE 

EFFECTS/RATIONALE : 

LOSS OF INJECTOR COOLING, FOR ONE APU. CRITICALITY IS 2/1R FOR 
DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT COULD CAUSE FUEL TO 
DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-141 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

240 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: INJECTOR COOLING WATER TANK HEATER 

FAILURE MODE: FAIL-OFF, OR LOW OUTPUT 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER TANK HEATER 

4 ) 

5) 

6 ) 

7 ) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

. 3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/3 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

c c P 3 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC363-0025-0002 


CAUSES: BROKEN WIRE, THERMOSTAT FAIL OPEN, SHORT CIRCUIT, 

INSTALLATION ERROR . 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANCY FOR HEATING INJECTOR COOLING WATER TANK . 

BOTH 


IF 


INJECTOR COOLING 


WILL BE LOST. CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU 
COOLDOWN. APU STARTED HOT COULD CAUSE FUEL TO DETONATE. 


REFERENCES: 


C-142 


REPORT DATE 12/10/86 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

241 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: INJECTOR COOLING WATER TANK HEATER THERMOSTAT 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER TANK HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/3 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

c [ p ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC452-0147-XXXX 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF REDUNDANT HEATER FOR INJECTOR COOLING WATER TANK. IF 
BOTH HEATERS ARE LOST, WATER CAN FREEZE AND INJECTOR COOLING WILL 
BE LOST. CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN. 

APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-143 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/03/86 

SUBSYSTEM: APU 

MDAC ID: 242 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: INJECTOR COOLING WATER TANK HEATER THERMOSTAT 

FAILURE MODE: FAILS CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER TANK HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

8 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUN 

PRELAUNCH: 

3/3 . 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC452-0147-XXXX 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

AFFECTED HEATER SET (A OR B) IS FAILED ON WHEN ACTIVE, BUT CAN BE 
SWITCHED OFF.' ^ 


REFERENCES: 


REPORT DATE 12/10/86 


C-144 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

243 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: INJECTOR COOLING WATER LINE HEATER 

FAILURE MODE: FAILS OFF, OR LOW OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER LINE HEATER 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/3 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC3 63-002 6-XXXX 


CAUSES: BROKEN WIRE, .THERMOSTAT FAIL OPEN, SHORT CIRCUIT, 

INSTALLATION ERROR 

EFFECTS/RATIONALE : 

LOSS OF REDUNDANCY FOR HEATING INJECTOR COOLING WATER LINES. IF 
BOTH HEATERS ARE LOST, WATER LINES WILL FREEZE, AND INJECTOR 
COOLING WILL BE LOST. CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU 
COOLDOWN. APU STARTED HOT COULD CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-145 


DATE: 

SUBSYSTEM: 
MDAC ID: 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


11/03/86 

APU 

244 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: 

FAILURE MODE: 


INJECTOR COOLING WATER LINE HEATER THERMOSTAT 
FAIL OPEN 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INJECTOR COOLING SYSTEM 

3) WATER LINE HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 

• ■ » 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

c C p i 


LOCATION: 
PART NUMBER: 


AFT COMPARTMENT 
MC452-0147-XXXX 


CAUSES : CONTA MINATION . ... . .. , , . . 

EFFECTS/RATIONALE : 

LOSS OF REDUNDANT HEATER FOR INJECTOR COOLING WATER LINES. IF 
BOTH HEATERS ARE LOST, LINES CAN FREEZE AND INJECT OR COO LING WILL 
BE LOST. ~ CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN. 

APU STARTED HOT COULD CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-146 


INDEPENDENT ORBITER ASSESSMENT 
ORB I TER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/03/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 3/3 

MDAC ID: 245 ABORT: 3/3 

ITEM: INJECTOR COOLING WATER LINE HEATER THERMOSTAT 

FAILURE MODE: FAIL CLOSED 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 


1) 

APU 




2) 

INJECTOR COOLING 

SYSTEM 



3) 

WATER LINE HEATER 



4) 

THERMOSTAT 




5) 





6) 





7) 





8) 





9) 







CRITICALITIES 



FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 


LIFTOFF: 

3/3 

TAL: 

3/3 


ONORBIT: 

3/3 

AOA: 

3/3 


DEORBIT: 

3/3 

ATO: 

3/3 


LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC452-0147-XXXX 


CAUSES: SHORT, WELDED CONTACTS 

EFFECTS/RATIONALE: 

AFFECTED HEATER SET (A OR B) IS FAILED ON WHEN ACTIVE, BUT CAN BE 
SWITCHED OFF. 


REFERENCES: 


REPORT DATE 12/10/86 


C-147 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

246 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING RELIEF VALVE 

FAILURE MODE: FAIL CLOSED? RELIEVE OVER SPEC 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) RELIEF VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

2/1R 

3/3 

ATO: 

2/1R 

REDUNDANCY SCREENS: 

A [ 2 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC284-0431-0001 


CAUSES: CONTAMINATION, CORROSION 


EFFECTS/RATIONALE : 

THERMAL EXPANSION IN WATER LINE BETWEEN TANK VALVES COULD RUPTURE 
WATE R LI NE. OR STAR T A LEAK. RES ULT COULD BE LOSS OF REDUNDAN CY 
FOR FUEL PUMP/GGVM COOLING. CRITICALITY IS 2/1R FOR DEORBIT 
BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-148 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

247 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL PUMP/GGVM COOLING RELIEF VALVE 

FAILURE MODE: FAILS TO CLOSE (STUCK OPEN); INTERNAL LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) RELIEF VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY SCREENS: 


CRITICALITIES 

HDW/FUNC ABORT HDW/FUNC 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 


A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: 
PART NUMBER: 


AFT COMPARTMENT 
MC2 84-04 3 1-0001 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

NO EFFECT; PULSING VALVE DOWNSTREAM CLOSES OFF WATER FLOW. 


REFERENCES : 


REPORT DATE 12/10/86 


C-149 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/03/86 

S UBSYS TEM: APU 

MDAC ID: 248 


HIGHEST CRITICALITY HDW/FUNC 
F LIGH T: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING RELIEF VALVE 

FAILURE MODE: EXTERNAL LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) RELIEF VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 

__ CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC284-0431-0001 




CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR. 

EFFECTS/RATIONALE : 

LOSS OF COOLING WATER; LOSS OF REDUNDANCY FOR FUEL PUMP/GGVM 
COOLING. CRITICALITY IS 2/1R FOR DEORBIT BEFORE APU COOLDOWN. 
APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-15Q 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

249 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING GN2 LINE 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) GN2 LINE 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C £ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR, FATIGUE 


EFFECTS/RATIONALE : 

LOSS OF PRESSURE FROM REDUNDANT COOLING SYSTEM. OTHER SYSTEM IS 
UNAFFECTED. IF BOTH SYSTEMS WERE LOST, NO APU POST-RUN COOLDOWN. 
APU COULD DETONATE IF STARTED WHILE HOT FOR EMERGENCY DEORBIT. 
CRITICALITY IS 2/1R FOR DEORBIT BEFORE APU COOLDOWN. 


REFERENCES : 


REPORT DATE 12/10/86 


C-151 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

250 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING VALVE 

FAILURE MODE: FAIL TO OPEN? FAIL TO REMAIN OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 
1) APU 


HIERARCHY: 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


FUEL PUMP/GGVM COOLING SYSTEM 
FUEL PUMP/GGVM COOLING VALVE 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0052-000X 


CAUSES: CORROSION, CONTAMINATION, SHORTED OR OPEN COIL 

EFFECTS/RATIONALE : 

LOSS OF REDUNDANT FUEL PUMP/GGVM COOLING FOR ONE APU. 
CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN. 


REFERENCES: 


REPORT DATE 12/10/86 


C-152 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

251 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING VALVE 

FAILURE MODE: FAIL OPEN (FAIL TO CLOSE), INTERNAL LEAK 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) FUEL PUMP/GGVM COOLING VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

2/1R 

3/3 

ATO: 

2/1R 

REDUNDANCY SCREENS: 

A [ 2 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0552-000X 

CAUSES: CONTAMINATION, MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

NO EFFECT UNTIL SYSTEM IS ACTIVATED? THEN, DEPLETION OF ONE 
SYSTEM'S WATER UNTIL THAT SYSTEM IS DEACTIVATED. CRITICALITY IS 
2/1R FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE 
FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-153 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

HDW/FUNC 
3/1R 
3/1R 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) FUEL PUMP/GGVM COOLING VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

252 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: FUEL PUMP/GGVM COOLING VALVE 

FAILURE MODE: INTERNAL BARRIER FAILURE 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/3 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 2 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0552-000X 


CAUSES: MANUFACTURING. DEFECT 

EFFECTS/RATIONALE : 

SHORT CIRCUIT OF SOLENOID COIL-VALVE WILL BE FAILED CLOSED. 
CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN. VALVE 
FAILED CLOSED MEANS NO COOLING FOR AFFECTED APU. APU STARTED HOT 
CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-154 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

253 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING VALVE 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) FUEL PUMP/GGVM COOLING VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/1R ' 
3/3 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 2 ] 

B [NA ] 

c [ p ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0552-000X 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR 

EFFECTS/RATIONALE : 

NO EFFECT UNTIL SYSTEM IS ACTIVATED; THEN, DEPLETION OF ONE 
SYSTEM'S WATER, AND NO COOLING TO ONE APU (UNTIL SWITCHOVER TO 
REDUNDANT SYSTEM). CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU 
COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-155 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

254 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER TANK 

FAILURE MODE: EXTERNAL LEAK (WATER OR N2) 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER TANK 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3-- 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

Ml] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC282-0094-0001 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANCY FOR POST-RUN APU COOLDOWN. CRITICALITY IS 
2/1R FOR DEOR BIT BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE 
FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-156 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/03/86 HIGHEST CRITICALITY HDW/FUNC 

2/1R 
2/1R 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER TANK 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 


SUBSYSTEM: APU 

MDAC ID: 255 


FLIGHT: 

ABORT: 


ITEM: FUEL PUMP/GGVM COOLING WATER TANK 

FAILURE MODE: DIAPHRAGM LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

2/1R 

3/3 

ATO: 

2/1R 

REDUNDANCY SCREENS: A [ 2 ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC282-0094-0001 

B [ P ] 

c [ p ) 

CAUSES: MANUFACTURING 

ERROR 

DEFECT, 

HANDLING DAMAGE, 

INSTALLATION 


EFFECTS/RATIONALE : 

NO EFFECT UNTIL, SYSTEM ACTIVATED; THEN, MAY SEE FASTER DEPLETION 
OF SYSTEM PRESSURE AS N2 IS EXPELLED. WORST CASE IS LOSS OF 
REDUNDANT SYSTEM. CRITICALITY IS 2/1R FOR DEORBIT BEFORE APU 
COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-157 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/03/86 

SUBSYSTEM: APU 

MDAC ID: 256 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER LINES -BETWEEN TANK 

AND TANK VALVES 
FAILURE MODE: LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER LINES 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

2/1R 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 
5/3 
' 3/3 
3/3 
2/1R 


REDUNDANCY SCREENS: A [ 1 ] B[P] C[P] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465521 


CAUSES : MANUFACTURING DEFECT, INSTALLATION ERROR 


EFFECTS/RATIONALE : 

L OSS OF CO OLING WAT ER FR OM ONE SYSTEM. CRITICALITY IS 2/1R FOR 
DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO 
DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-158 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/03/86 

SUBSYSTEM: APU 

MDAC ID: 257 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER LINES -BETWEEN TANK 

AND TANK VALVES 
FAILURE MODE: BLOCKAGE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER LINES 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465521 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF REDNUNDANCY FOR POST-RUN APU COOLDOWN. CRITICALITY IS 
2/1R FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE 
FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-159 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

258 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER FILL COUPLING 

FAILURE MODE: LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER LINES 

4) FILL COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONOKBIT: 

3/3 

AOA: 

• 3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c [ p ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC621-0038-0100 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR, CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF COOLING WATER FOR ONE SYSTEM. CRITICALITY IS 2/1R FOR 
DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO 
DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-160 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

AFU 

259 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL PUMP/GGVM COOLING WATER FILL COUPLING 

FAILURE MODE: FAIL CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER LINES 

4) FILL COUPLING 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC621-0038-0100 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

CANNOT SERVICE ONE FUEL PUMP/GGVM COOLING SYSTEM. POSSIBLE 
LAUNCH DELAY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-161 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

AFU 

260 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER LINES-BETWEEN TANK 

VALVE AND AFU 
FAILURE MODE: LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER LINES 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: V070-465521 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR 

EFFECTS/RATIONALE : 

NO EFFECT UNTIL EY3TEM IS ACTIVATED; THEN, LOSS OF COOLING WATER 
FOR ONE SYSTEM. CRITICALITY IS 2/1R FOR DEORBIT BEFORE APU 
COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-162 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

261 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER LINES -BETWEEN TANK 

VALVE AND APU 

FAILURE MODE: BLOCKAGE AT FILTER 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER LINES 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/3 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: V07 0-4 65521 


CAUSES: CONTAMINATION 
EFFECTS/RATIONALE : 

LOSS OF COOLING REDUNDANCY TO ONE APU. CRITICALITY IS 3/1R FOR 
DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO 
DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-163 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/03/86 

SUBSYSTEM: AFU 

MDAC ID: 262 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL FUMP/GGVM COOLING WATER LINE FLEX HOSE 

FAILURE MODE: LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER LINES 

4) FLEX HOSE 

5) 

6 ) 

V 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/3 


“ ' I 1 -; 

REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: ME271-0079-64XX 

CAUSES: MANUFACTURING DEFECT 




EFFECTS/RATIONALE : 

NO EFFECT UNTIL SYSTEM IS ACTIVATED; THEN, LOSS OF COOLING WATER 
TO ONE APU. CRITICALITY IS 3/lR FOR DEORBIT BEFORE APU COOLDOWN. 
APU STARTED HOT' CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


C-164 


REPORT DATE 12/10/86 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

11/03/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

3/1R 

MDAC ID: 

263 

ABORT: 

3/1R 

ITEM: 

SPRAY ORIFICE 



FAILURE MODE: BLOCKAGE 



LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER LINES 

4) SPRAY NOZZLES 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

c [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF POST-RUN COOLING TO ONE APU. CRITICALITY IS 3/1R FOR 
DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO 
DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-165 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

264 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER TANK VALVE 

FAILURE MODE: FAIL TO OPEN; FAIL TO REMAIN OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER TANK VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A £ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0552-000X 


CAUSES: CONTAMINATION, CORROSION, SHORTED OR OPEN SOLENOID COIL 
EFFECTS/RATIONALE : 

LOSS OF REDUNDANCY FOR APU POST-RUN COOLING. CRITICALITY IS 2/1R 
FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE FUEL 
TO DETONATE.' : ‘ 


REFERENCES: 


REPORT DATE 12/10/86 


C-166 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

265 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER TANK VALVE 

FAILURE MODE: FAIL TO CLOSE (STUCK OPEN) , INTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER TANK VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [NA ] 

C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0552-000X 




CAUSES: MANUFACTURING DEFECT, CONTAMINATION 

EFFECTS/RATIONALE : 

NO EFFECT: PULSING VALVES PROVIDE REDUNDANT SHUTOFF. 

CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN (MUST LOSE 
ONE MORE VALVE AND REDUNDANT COOLING SYSTEM AND BE FORCED TO 
DEORBIT WHILE APU'S ARE HOT TO BE AT CRITICALITY 1). 

APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-167 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

AFU 

266 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER TANK VALVE 

FAILURE MODE: INTERNAL BARRIER LEAK 


LEAD ANALYST; J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER TANK VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284 -0552-000X 


CAUSES: MANUFACTURING DEFECT — - . 

EFFECTS/RATIONALE: 

WATER IN S OLENOID CAVITY WI LL SHORT OUT SOLENOID COIL? VALVE WILL 
BE FAILED IN CLOSED POSITION. LOSS OF COOLING SYSTEM REDUNDANCY. 
. CKITrCSLITY IT 2/1R FOR DEORBIT BEFORE AFU COOLDOWN. 

APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES: 


/ 


REPORT DATE 12/10/86 


C-168 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

AFU 

267 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER TANK VALVE 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 
1) APU 


HIERARCHY: 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


FUEL PUMP/GGVM COOLING SYSTEM 
WATER TANK VALVE 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

2/1R 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

2/1R 


REDUNDANCY SCREENS: A [ 1 ] B [ P ] C[P] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: ME284-0552-000X 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR 

EFFECTS/RATIONALE : 

LOSS OF COOLING WATER FROM ONE OF TWO COOLING SYSTEMS. * 
CRITICALITY IS 2/1R FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED 
HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-169 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

268 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER TANK HEATER 

FAILURE MODE: FAIL OFF, OR LOW OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER TANK HEATER 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 




REDUNDANCY SCREENS: A [ 1 ] B [NA ] C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC363-0025-0003 

CAUSES: SHORT CIRCUIT, BROKEN WIRE, INSTALLATION ERROR 


EFFECTS/RATIONALE : 

LOSS OF HEATER REDUNDANCY FOR ONE SYSTEM WATER TANK. IF THE 
OTHER HEATER SET IS LOST, THE WATER TANK CAN FREEZE, CAUSING LOSS 
OF FUEL PUMP/GGVM COOLING REDUNDANCY. CRITICALITY IS 3/1R FOR 
DEORBIT BEFORE APU COOLDOWN. 

APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-170 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

269 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER TANK HEATER 

THERMOSTAT 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN 
1) APU 


HIERARCHY: 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


FUEL PUMP/GGVM COOLING SYSTEM 
WATER TANK HEATER 
THERMOSTAT 



CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FU1 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: - 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/3 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

c [ p 3 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME360-0017-0006 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF HEATER REDUNDANCY FOR ONE OF TWO WATER TANKS. IF BOTH 
HEATERS LOST, WATER COULD FREEZE, AND COOLING SYSTEM REDUNDANCY 
WOULD BE LOST. CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU 
COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-171 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

AFU 

270 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL PUMP/GGVM COOLING WATER TANK HEATER 

THERMOSTAT 

FAILURE MODE: FAIL CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER TANK HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME360-0017-0006 

CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

AFFECTED HEATER SET IS FAILED ON WHEN ACTIVE, BUT CAN BE SWITCHED 
OFF. REDUNDANT HEATER SET IS UNAFFECTED. 


REFERENCES : 


REPORT DATE 12/10/86 


C-172 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

271 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING WATER LINE HEATER 

FAILURE MODE: FAIL OFF, OR LOW OUTPUT 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER LINE HEATER 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 




REDUNDANCY SCREENS: A [ 1 ] B [NA ] C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC363-0026-XXXX 

CAUSES: SHORT CIRCUIT, BROKEN WIRE, INSTALLATION ERROR 


EFFECTS/RATIONALE : 

LOSS OF HEATER REDUNDANCY FOR A PORTION OF THE WATER LINES FOR 
ONE OF THE TWO COOLING SYSTEM. IF OTHER HEATER WERE LOST, THE 
AFFECTED PROTION OF THE LINE WOULD FREEZE, CAUSING LOSS OF 
COOLING SYSTEM REDUNDANCY TO ONE APU, OR ALL THREE APUS. 
CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED 
HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-173 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/03/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 3/1R 

MDAC ID: 272 ABORT: 3/1R 

ITEM: FUEL PUMP/GGVM COOLING WATER LINE HEATER 

THERMOSTAT 

FAILURE MODE: FAIL OPEN 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER LINE HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/1R 

3/3 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC452-0147-XXXX 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF HEATER REDUNDANCY FOR A PROTION OF THE WATER LINE FOR ONE 
OF THE TWO COOLING SYSTEMS. IF OTHER HEATER WERE LOST, THE 
AFFECTED PORTION OF THE LINE WOULD FREEZE, COUSING LOSS OF 
COOLING SYSTEM REDUNDANCY TO ONE APU, OR ALL THREE APUS. 
CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED 
HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-174 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/09/86 

APU 

273 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL PUMP/GGVM COOLING WATER LINE HEATER 

THERMOSTAT 

FAILURE MODE: FAIL CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) WATER LINE HEATER 

4) THERMOSTAT 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE HDW/FUNC 


ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 


RTLS: 

3/3 

LIFTOFF: 

3/3 


TAL: 

3/3 

ONORBIT: 

3/3 


AOA: 

3/3 

DEORBIT: 

3/3 


ATO: 

3/3 

LANDING/ SAFING: 

3/3 




REDUNDANCY SCREENS: A 

> C 2 ] 

B 

[NA ] 

C [ P ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC452-0147-XXXX 




CAUSES: CONTAMINATION 





EFFECTS/RATIONALE : 
AFFECTED HEATER SET IS 

FAILED ON 

WHEN 

ACTIVE, 

BUT CAN BE i 

OFF. REDUNDANT HEATER 

SET IS UNAFFECTED. 



REFERENCES : 


REPORT DATE 12/10/86 


C-175 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/03/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 3/1R 

MDAC ID: 274 ABORT: 3/1R 

ITEM: FUEL FUMP/GGVM COOLING CHECK VALVE 

FAILURE MODE: FAIL TO OPEN (FAIL CLOSED) 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL FUMP/GGVM COOLING SYSTEM 

3) CHECK VALVE 

4) - 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

IANDING/SAFING: 

3/3 

-- * 


REDUNDANCY SCREENS: 

A [ 2 ] 

B C P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: 


CAUSES: CONTAMINATION , CORROSION 


EFFECTS/RATIONALE : 

LOSS OF FUEL PUMP/GGVM COOLING TO ONE APU. CRITICALITY IS 3/1R 
FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE FUEL 
TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-176 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC ID: 


10/10/86 

APU 

275 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: FUEL PUMP/GGVM COOLING CHECK VALVE 

FAILURE MODE: FAIL TO CLOSE (STUCK OPEN) 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) FUEL PUMP/GGVM COOLING SYSTEM 

3) CHECK VALVE 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: 


CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

NO EFFECT. 


REFERENCES : 


REPORT DATE 12/10/86 C-177 


HDW/FUNC 

3/3 

3/3 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/03/86 

APU 

276 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: EXHAUST PLENUM HOUSING 

FAILURE MODE: EXTERNAL LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) STRUCTURE 

3) EXHAUST PLENUM HOUSING 


CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


HDW/FUNC 

1/1 

1/1 

3/3 

1/1 


LANDING/SAFING: 1/1 

REDUNDANCY SCREENS: A [NA ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-00001 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


B [NA ] 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [NA ] 


CAUSES: MANUFACTURING DEFECT, HANDLING DAMAGE, FATIGUE, 

CONTAMINATION OF SEALING SURFACES 


ALLOWS HOT GASES INTO AFT COMPARTMENT. 
EQUIPMENT IN COMPARTMENT, FIRE HAZARD. 
FIRE HAZARD. 


POS SIBLE DAMAGE TO OTHER 
CRITICALITY IS 1/1 DUE TO 


REFERENCES: 


REPORT DATE 12/10/86 


C-178 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/02/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

2/1R 

MDAC ID: 

277 

ABORT: 

1/1 

ITEM: 

EXHAUST PLENUM 

HOUSING 


FAILURE MODE: CRACKING 

LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) STRUCTURE 

3) EXHAUST PLENUM HOUSING 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-00001 


CAUSES: THERMAL FATIGUE, MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

HOUSING COULD COME INTO CONTACT WITH TURBINE WHEEL, CAUSING LOSS 
OF APU. CRITICALITY IS 2/1R DUE TO LOSS OF APU. ABORT: 
CRITICALITY IS 1/1 FOR ENGINE OUT ABORTS DUE TO POSSIBLE LOSS OF 
ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-179 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC ID: 


10 / 02/86 

AFU 

278 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: 

FAILURE MODE: 


EXHAUST PLENUM HOUSING 
INTERNAL LEAK 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) STRUCTURE 

3) EXHAUST PLENUM HOUSING 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: 
PART NUMBER: 


AFT COMPARTMENT 
MC201-00001 


CAUSES: MANUFACTURING DEFECT IN SEALS 

EFFECTS/RATIONALE : 

ALLOWS TURBINE GASES TO ENTER GEARBOX; MIXING WITH LUBE OIL 
PRODUCES WAX WHICH COULD PREVENT PROPER LUBRICATION OF GEARBOX; 
APU COULD BE LOST. CRITICALITY IS 2/1R FOR APU LOSS. ABORT: 
CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS, DUE TO POSSIBLE LOSS 
OF ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-180 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 02/86 

APU 

279 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: GEARBOX HOUSING 

FAILURE MODE: LEAK 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) STRUCTURE 

3) GEARBOX HOUSING 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

• 1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 

EFFECTS/RATIONALE: 

LOSS OF LUBE OIL FROM GEARBOX; APU WI33L BE LOST IF LEAKAGE IS 
GREAT ENOUGH. CRITICALITY IS 2/1R DUE TO LOSS OF APU. ABORT: 
CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS DUE TO POSSIBLE LOSS OF 
ANOTHER MAIN ENGINE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-181 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/12/86 

SUBSYSTEM: APU 

MDAC ID: 280 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: "APU CONTROL" SWITCH 

FAILURE MODE: FAIL TO CLOSE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) APU CONTROL CIRCUIT 

4) "APU CONTROL" SWITCH 

5) 

6) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

3/3 

AOA: 

/NA 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 

- - - 


REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES: CONTAMINATION, PIECE PART ST RU CTURAL FAILURE 

EFFECTS/RATIONALE : 

WORST-CASE EFFECT IS LOSS OF APU START/RUN CAPABILITY. 
CRITICALITY IS 2/1R DUE TO REDUNDANCY OF APU'S. 


REFERENCES: 


REPORT DATE 12/10/86 C-182 


HDW/FUNC 

2/1R 

2/1R 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATES 

SUBSYSTEM: 
MDAC ID: 


10/14/86 

APU 

281 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: "APU CONTROL" SWITCH 

FAILURE MODE: FAIL TO REMAIN CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


Iriij 



BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) APU CONTROL CIRCUIT 

4) "APU CONTROL" SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

. 1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

Ml] B 

C P ] 

C [ P ] 

LOCATION: PANEL R2 

PART NUMBER: 




CAUSES: VIBRATION, MECHANICAL SHOCK 




EFFECTS/RATIONALE : 

LOSS OF APU. CRITICALITY IS 2/1R DUE TO APU REDUNDANCY. ABORT: 
CRITICALITY IS 1/1 FOR ENGINE -OUT ABORTS, WHERE LOSS OF ONE APU 
CAN BE CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-183 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/14/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

2/1R 

MDAC ID: 

282 

ABORT: 

2/1R 

ITEM: 

"APU CONTROL" 

SWITCH 


FAILURE MODE: FAIL TO OPEN 

(STUCK IN "START/RUN") 


LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 


BREAKDOWN 

HIERARCHY: 



1) APU 




2) ELECTRICAL SYSTEM 



3) APU CONTROL CIRCUIT 



4) "APU 

CONTROL" SWITCH 

■ -- 



5) 

6 ) 

7) 

8 ) 
9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: PANEL R2 




PART NUMBER: 





CAUSES: PIECE-PART STRUCTURAL FAILURE, CONTAMINATION (SHORT 


EFFECTS/RATIONALE : 

APU CANNOT BE SHUT DOWN IN NORMAL MANNER; MUST BE SHUT DOWN BY 
CLOSING FUEL TANK VALVES. NO HOT RE ST ART CAPABILITY. 

CRITICALITY IS 2/1R FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED 
HOT MAY CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-184 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

HDW/FUNC 
3/3 
3/3 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) APU CONTROL CIRCUIT 

4) "APU CONTROL" SWITCH 

5) 

6 ) 

7) 

8 ) 

9) 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/14/86 

APU 

283 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE MODE: 


"APU CONTROL" SWITCH 
INADVERTENT OPERATION 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

/NA 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

/NA 

/NA 

/NA 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] 


C [NA ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES: VIBRATION, CONTAMINATION (SHORT) 


EFFECTS/RATIONALE : 

NO EFFECT - APU FUEL TANK VALVES WILL PREVENT FUEL FROM REACHING 
GAS GENERATOR. 


REFERENCES : 


REPORT DATE 12/10/86 


C-185 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 10/30/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 3/3 

MDAC ID: 284 ABORT: 3/3 

ITEM: AFU CONTROL CIRCUIT GROUND CONTROL INPUT DRIVER 

FAILURE MODE: FAIL OFF, FAIL TO REMAIN ON 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) APU CONTROL CIRCUIT 

4) GROUND CONTROL INPUT DRIVER 

5) 

6 ) 

7) 

8 ) 

9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] C [NA ] 


LOCATION: AFT LCA 1,2,3 

PART NUMBER: 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT, VIBRATION 


EFFECTS/RATIONALE : 

LOSS OF PRELAUNCH GROUND CONTROL OF APU START. NO EFFECT ON 
FLIGHT? THIS COMMAND IS NOT NEEDED FOR NORMAL PRELAUNCH 
ACTIVITIES. 


REFERENCES : 


REPORT DATE 12/10/86 


C-186 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

APU 

285 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

/NA 


ITEM: APU CONTROL CIRCUIT GROUND CONTROL INPUT DRIVER 

FAILURE MODE: INADVERTENT OPERATION 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) APU CONTROL CIRCUIT 

4) GROUND CONTROL INPUT DRIVER 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT LCA 1,2,3 

PART NUMBER: 


CAUSES: CONTAMINATION, VIBRATION, MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

PRELAUNCH, SENDS START COMMAND TO APU. APU WILL NOT START, 
BECAUSE FUEL TANK VALVES ARE CLOSED. COMMAND IS NULLIFIED AT 
LIFTOFF. APU WILL START WHEN FULE TANK VALVES ARE OPENED BEFORE 
LIFTOFF. 


REFERENCES: 


REPORT DATE 12/10/86 


C-187 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

AFU 

286 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: APU CONTROL CIRCUIT SWITCH POWER FUSE 

FAILURE MODE: FAIL OPEN 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) APU CONTROL CIRCUIT 

4) SWITCH POWER FUSE 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

c [ p ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES: CORROSION, INSTALLATION ERROR, MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANCY FOR APU START AND START/OVERRIDE COMMANDS. IF 
BOTH FUSES ARE LOST, APU WON'T OPERATE. CRITICALITY IS 3/1R DUE 
TO START COMMAND REDUNDANCY AND APU REDUNDANCY. — 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-188 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

APU 

287 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: 

FAILURE MODE: 


APU CONTROL CIRCUIT START CONTROL INPUT DIODE 
FAIL OPEN, SHORT TO GROUND 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) APU CONTROL CIRCUIT 

4) START CONTROL INPUT DIODE 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY SCREENS: 

LOCATION: AFT LCA 

PART NUMBER: 

CAUSES: CONTAMINATION 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/1R 

3/1R 

TAL: 

3/1R 

3/3 

AOA: 

3/1R 

3/1R 

3/3 

ATO: 

3/1R 

A [ 2 ] 

B C F ] 

C [ P ] 

1,2,3 

', VIBRATION, 

MANUFACTURING 

DEFECT 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANCY FOR APU START COMMAND, START/ OVERRIDE IS 
UNAFFECTED. IF APU START FUNCTION IS LOST, APU WILL NOT START, 
OR WILL SHUT DOWN. CRITICALITY IS 3/1R DUE TO START COMMAND 
REDUNDANCY AND APU REDUNDANCY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-189 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 10/14/86 

SUBSYSTEM: APU 

MDAC ID: 288 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: "APU CNTLR PWR" SWITCH 

FAILURE MODE: FAIL TO CLOSE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) CONTROLLER POWER CIRCUIT 

4) "APU CNTLR PWR" SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

3/3 

TAL: 

/NA 

ONORBIT: 

3/3 

AOA: 

/NA 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: PANEL R2 

PART NUMBER: ME452-0102-7252 


CAUSES: CONTAMINATION, PIECE-PART STRUCTURAL FAILURE 

EFFECTS/RATIONALE : 

LOSS OF POWER TO APU CONTROLLER, LOSS OF APU. CRITICALITY IS 
2/1R DUE TO APU REDUNDANCY. 


REFERENCES S 


REPORT DATE 12/10/86 


C-190 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/14/86 

APU 

289 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: "APU CNTLR PWR" SWITCH 

FAILURE MODE: FAIL TO REMAIN CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 


— 

1) 

APU 



2) 

ELECTRICAL 

SYSTEM 


3) 

CONTROLLER 

POWER CIRCUIT 


4) 

"APU CNTLR 

PWR" SWITCH 


5) 




6) 




7) 




8) 




9) 




CRITICALITIES 


mmm 

FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

1/1 


LIFTOFF: 

2/1R 

TAL: 

1/1 

mrn 

ONORBIT: 

2/1R 

AOA: 

1/1 


DEORBIT: 

2/1R 

ATO: 

1/1 

- ■ 

LANDING/SAFING: 

2/1R 



— 

REDUNDANCY SCREENS: 

A [ 1 ] B 

C P ] 

C [ P ] 

- 

LOCATION: PANEL R2 




— 

PART NUMBER: ME452-0102-7252 



_ . 

CAUSES: VIBRATION, MECHANICAL SHOCK 




EFFECTS/RATIONALE: 

LOSS OF APU. CRITICALITY IS 2/1R DUE TO APU REDUNDANCY. ABORT: 
CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS, WHERE LOSS OF ONE APU 
CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-191 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 10/14/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 3/3 

MDAC ID: 290 ABORT: 3/3 

ITEM: "APU CNTLR PWR" SWITCH 

FAILURE MODE: FAIL TO OPEN 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) CONTROLLER POWER CIRCUIT 

4) "APU CNTLR PWR" SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

/NA 

LIFTOFF: 

3/3 

TAL: 

/NA 

ONORBIT: 

3/3 

AO A: 

/NA 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 

LOCATION: PANEL 

R2 



PART NUMBER: ME452- 

-0102-7252 




CAUSES: PIECE-PART STRUCTURAL FAILURE, CONTAMINATION (SHORT) 

EFFECTS/RATIONALE : 

APU CONTROLLER CANNOT BE POWERED OFF. NO ADVERSE AFFECTS. 


REFERENCES : 


REPORT DATE 12/10/86 


C-192 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

APU 

291 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "APU CNTLR PWR" SWITCH 

FAILURE MODE: INADVERTENT OPERATION 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 


1) 

APU 


2) 

ELECTRICAL 

SYSTEM 

3) 

CONTROLLER 

POWER CIRCUIT 

4) 

"APU CNTLR 

PWR" SWITCH 

5) 



6) 



7) 



8) 



9) 




CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

3/3 

AO A: 

/NA 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 

LOCATION: PANEL 

R2 



PART NUMBER: ME452- 

-0102-7252 



CAUSES: VIBRATION, 

CONTAMINATION 

(SHORT) 



EFFECTS/RATIONALE : 

APU CONTROLLER IS POWERED UP INADVERTENTLY. NO ADVERSE EFFECTS. 


References : 


REPORT DATE 12/10/86 


C-193 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 10/14/86 

SUBSYSTEM: AFU 

MDAC ID: 292 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: CONTROLLER POWER CIRCUIT RPC 

FAILURE MODE: FAIL OPEN (NO OUTPUT) 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) CONTROLLER POWER CIRCUIT 

4) REMOTE POWER CONTROLLER 

5) 

6 ) 

7) 

3 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: . 

3/1R 

ATO: 

2/IR 

LANDING/SAFING 

: 3/1R 



REDUNDANCY SCREENS: A [ 1 ] 

LOCATION: AV BAY 4,5,6 

PART NUMBER: MC450-0017-1075 

B [ P ] 

c E p ] 


CAUSES: CONTAMINATION, VIBRATION, MECHANICAL SHOCK 


EFFECTS/RATIONALE : 

LOSS OF APU CONTROLLER REDUNDANT POWER SUPPLY. CRITICALITY IS 
3/1R DOT TO POWER SUPPLY AND APU REDUNDANCY. ABORT: CRITICALITY 

IS 2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF ONE APU CAN BE 
CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-194 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/14/86 

APU 

293 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CONTROLLER POWER CIRCUIT RPC 

FAILURE MODE: FAIL CLOSED., 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 
1) APU 


HIERARCHY: 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


ELECTRICAL SYSTEM 
CONTROLLER POWER CIRCUIT 
REMOT POWER CONTROLLER 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING 

: 3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 

LOCATION: AV BAY 

4,5,6 



PART NUMBER: MC450-0017-1075 




CAUSES: CONTAMINATION (SHORT) , MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

APU CONTROLLER IS ADVERTENTLY POWERED UP. NO ADVERSE EFFECTS. 


REFERENCES : 


REPORT DATE 12/10/86 


C-195 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/14/86 

APU 

294 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

2/1R 


ITEM: CONTROLLER POWER CIRCUIT POWER INPUT DIODE 

FAILURE MODE: FAIL OPEN, OR SHORT CIRCUIT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) CONTROLLER POWER CIRCUIT 

4) POWER INPUT DIODE 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 


REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: JANTXIN1188R 


CAUSES: CONTAMINATION, VIBRATION, MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANT POWER TO APU CONTROLLER. CRITICALITY IS 3/1R 
DUE TO POWER SUPPLY AND APU REDUNDANCY. ABORT: CRITICALITY IS 

2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF ONE APU CAN BE 
CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-196 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/14/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

3/1R 

MDAC ID: 

295 

ABORT: 

2/1R 

ITEM: 

CONTROLLER 

POWER SWITCH POWER FUSE 


FAILURE MODE: FAIL OPEN 

LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) CONTROLLER POWER CIRCUIT 

4) SWITCH POWER FUSE 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: PANEL R2 

PART NUMBER: ME451-0018-0100 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR 

EFFECTS/RATIONALE : 

LOSS OF REDUNDANT POWER TO APU CONTROLLER. CRITICALITY IS 3/1R 
DUE TO POWER SUPPLY AND APU REDUNDANCY. ABORT: CRITICALITY IS 

2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF ONE APU CAN BE 
CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-197 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/14/86 

APU 

296 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

2/1R 


ITEM: CONTROLLER POWER CIRCUIT CONTROL INPUT DIODE 

FAILURE MODE: FAIL OPEN, OR SHORT CIRCUIT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) CONTROLLER POWER INPUT 

4) CONTROL DIODE 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 


CRIT ICALI TIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 


REDUNDANCY SCREENS: 

A [ 2 ] 

B C P ] 

C [ P ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: 


CAUSES: MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

LOSS OF CONTROLLER POWER SUPPLY A. CRITICALITY IS 3/1R DUE TO 
POWER SUPPLY AND APU REDUNDANCY. ABORT: CRITICALITY IS 2/1R FOR 

ENGINE-OUT ABORTS, WHERE LOSS OF ONE APU CAN BE CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-198 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/30/86 

APU 

297 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CONTROLLER POWER CIRCUIT GROUND CONTROL INPUT 

DIODE 

FAILURE MODE: FAIL OPEN, SHORT TO GROUND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) CONTROLLER POWER CIRCUIT 

4) GROUND CONTROL INPUT DIODE 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT PCA 4,5,6 

PART NUMBER: 


CAUSES: CONTAMINATION, VIBRATION, MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

LOSS OF PRELAUNCH APU CONTROLLER ACTIVATION COMMAND. THIS 
COMMAND IS NOT NEEDED FOR NORMAL PRELAUNCH ACTIVITIES. 


REFERENCES : 


REPORT DATE 12/10/86 


C-199 



INDEPENDENT ORBITER ASSESSMENT 


ORBITER SUBSYSTEM 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/14/86 

APU 

298 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "APU SPEED SELECT" SWITCH 

FAILURE MODE: FAIL TO CLOSE 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) SPEED SELECT CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES: CONTAMINATION, PIECE-PART STRUCTURAL FAILURE 


EFFECTS/RATIONALE : 

HIGH SPEED CANNOT BE SELECTED FOR AFFECTED APU. NO ADVERSE 
EFFECT. 


REFERENCES: 


REPORT DATE 12/10/86 


C-200 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 10/14/86 

SUBSYSTEM: APU 

MDAC ID: 299 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "APU SPEED SELECT" SWITCH 

FAILURE MODE: FAIL TO REMAIN CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) SPEED SELECT CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

' 3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES: VIBRATION, MECHANICAL SHOCK 

EFFECTS/RATIONALE: 

APU DROPS FROM HIGH SPEED (113%) TO NORMAL SPEED (103%). NO 
ADVERSE EFFECT. 


REFERENCES: 


REPORT DATE 12/10/86 


C-201 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/14/86 

APU 

300 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: 

FAILURE MODE: 


"APU SPEED SELECT" SWITCH 
FAIL TO OPEN 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) SPEED SELECT CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES: PIECE-PART STRUCTURAL FAILURE, CONTAMINATION (SHORT) 


EFFECTS/RATIONALE : 

APU STUCK IN HIGH SPEED. NO ADVERSE EFFECT. 


REFERENCES : 


REPORT DATE 12/10/86 


C-202 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 10/14/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 3/3 

MDAC ID: 301 ABORT: 3/3 

ITEM: "APU SPEED SELECT" SWITCH 

FAILURE MODE: INADVERTENT OPERATION 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) SPEED SELECT CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES: VIBRATION, CONTAMINATION (SHORT) 

EFFECTS/RATIONALE : 

APU SHIFTS TO HIGH SPEED. NO ADVERSE EFFECTS. 


REFERENCES: 


REPORT DATE 12/10/86 


C-203 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 10/14/86 

SUBSYSTEM: AFU 

MDAC ID: 302 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: SPEED SELECT CIRCUIT 

FAILURE MODE: OPEN CIRCUIT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) SPEED SELECT CIRCUIT 

4) 

5) 

6 ) 

7) 

8 ) 

9) 



CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: VS70-460109 


CAUSES: VIBRATION, HANDLING DAMAGE, INSTALLATION ERROR 

EFFECTS/RATIONALE: 

LOSS OF HIGH SPEED FOR AFFECTED APU. NO ADVERSE EFFECT. 


REFERENCES : 


REPORT DATE 12/10/86 


C-204 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

AFU 

303 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: SPEED SELECT CIRCUIT 

FAILURE MODE: DRIVER FAIL ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 


— 

1) 

APU 


2) 

ELECTRICAL SYSTEM 

£ 

3) 

SPEED SELECT CIRCUIT 


4) 



5) 



6) 


Z.1 

7) 


— 

8) 



9) 



CRITICALITIES 



FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 


LIFTOFF: 

3/3 

TAL: 

3/3 


ONORBIT: 

3/3 

AOA: 

3/3 


DEORBIT: 

3/3 

ATO: 

3/3 


LANDING/SAFING: 

3/3 




REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: VS70-460109 


CAUSES: MANUFACTURING DEFECT, PIECE-PART STRUCTURAL FAILURE, 

CONTAMINATION 

EFFECTS/RATIONALE : 

NO EFFECT, DUE TO 2 DRIVERS IN SERIES. IF BOTH FAIL ON, APU 
SHIFTS TO HIGH SPEED. NO ADVERSE EFFECT. 


REFERENCES: 


REPORT DATE 12/10/86 


C-205 



INDEPENDENT ORB I TER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


HDW/FUNC 
3/3 
3/3 

ITEM: OVERSPEED/UNDERSPEED INDICATION CIRCUIT 

FAILURE MODE: OPEN CIRCUIT 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/27/86 

AFU 

304 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) OVERSPEED/UNDERSPEED INDICATION CIRCUIT 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE HDW/FUNC ABORT 

PRELAUNCH: 3/3 RTLS: 

LIFTOFF: 3/3 TAL: 

ONORBIT: 3/3 AOA: 

DEORBIT: 3/3 ATO: 

LANDING/SAFING: 3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 


LOCATION: AV BAY 3,4,5,6;AFT BODY; MIDDECK 

PART NUMBER: VS70-460109 


C AUSES: P IECE -PART STRUCTURAL FAILURE 

EFFECTS/RATIONALE : 

NO UNDERSPEED (OR OVERSPEED) SI GNAL TO CAUTION & W ARNING SYSTEM 
TO GENERATE WARNING LIGHT AND TONE. CREW STILL RECEIVES 
SOFTWARE-GENERATED TONE AND CRT MESSAGE. ALSO, NO AUTOMATIC 
CLOSURE OF FUEL TANK VALVES. 

APU IS SHUT DOWN BY SECONDARY FUEL VALVE ONLY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-206 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

APU 

305 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "APU AUTO SHUTDOWN" SWITCH 

FAILURE MODE: FAIL TO CLOSE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) AUTO SHUTDOWN CONTROL CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES: CONTAMINATION, PIECE-PART STRUCTURAL FAILURE 

EFFECTS/RATIONALE : 

CANNOT INHIBIT APU AUTO SHUTDOWN. NO ADVERSE EFFECT. 


REFERENCES : 


REPORT DATE 12/10/86 


C-207 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

AFU 

306 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: "APU AUTO SHUTDOWN" SWITCH 

FAILURE MODE: FAIL TO REMAIN CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) AUTO SHUTDOWN CONTROL CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/S AFING: 

2/1R 

2/1R 

ATO: 

2/1R 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES: VIBRATION, MECHANICAL SHOCK 

EFFECTS/RATIONALE: 

APU AUTO SHUTDOWN IS ENABLED; IF APU WAS IN "INHIBIT" MODE TO 
ALLOW IT TO RUN (DUE TO PREVIOUS FAILURE), THIS WOULD CAUSE LOSS 
OF APU. CRITICA LITY IS 2/1R. 

ABORT: CRITICALITY IS 3/3, BECAUSE NO APU WOULD BE RESTARTED IN 

"INHIBIT" MODE FOR ASCENT. 


REFERENCES: 


REPORT DATE 12/10/86 


C-208 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

AFU 

307 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "AFU AUTO SHUTDOWN" SWITCH 

FAILURE MODE: FAIL TO OPEN 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) AUTO SHUTDOWN CONTROL CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FU 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: * 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: 
PART NUMBER: 


PANEL R2 


CAUSES: PIECE-PART STRUCTURAL FAILURE, CONTAMINATION 

EFFECTS/RATIONALE : 

APU AUTO SHUTDOWN CANNOT BE ENABLED. NO ADVERSE EFFECT. 


REFERENCES: 


REPORT DATE 12/10/86 


C-209 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

APU 

308 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "APU AUTO SHUTDOWN" SWITCH 

FAILURE MODE: INADVERTENT OPERATION 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) AUTO SHUTDOWN CONTROL CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] 


C [NA ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES: VIBRATION, CONTAMINATION (SHORT) 


EFFECTS/RATIONALE : 

APU AUTO SHUTDOWN IS INHIBITED. NO ADVERSE EFFECT. 


REFERENCES : 


REPORT DATE 12/10/86 


C-210 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

AFU 

309 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: 

FAILURE MODE: 


AUTO SHUTDOWN SWITCH POWER FUSE 
FAIL OPEN 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) AUTO SHUTDOWN CONTROL CIRCUIT 

4) SWITCH POWER FUSE 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] 


LOCATION: 
PART NUMBER: 


PANEL R2 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA ] 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR 

EFFECTS/RATIONALE : 

LOSS OF REDUNDANT "INHIBIT" SIGNAL TO 2 APU CONTROLLERS. 


REFERENCES: 


REPORT DATE 12/10/86 


C-211 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

APU 

310 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: AUTO SHUTDOWN CONTROL CIRCUIT DIODE 

FAILURE MODE: OPEN CIRCUIT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) AUTO SHUTDOWN CONTROL CIRCUIT 

4) DIODE 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] 


C [NA ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 

EFFECTS/RATIONALE: 

LOSS OF REDUNDANT 'INHIBIT 1 * SIGNAL TO ONE APU CONTROLLER. 


REFERENCES: 


REPORT DATE 12/10/86 


C-212 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

APU 

311 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: AUTO SHUTDOWN CONTROL CIRCUIT DIODE 

FAILURE MODE: SHORT TO GROUND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 
1) APU 


HIERARCHY: 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


ELECTRICAL SYSTEM 

AUTO SHUTDOWN CONTROL CIRCUIT 

DIODE 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: 

CAUSES: CONTAMINATION . * 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANT "INHIBIT" SIGNAL TO 2 APU CONTROLLERS. 


REFERENCES: 


REPORT DATE 12/10/86 


C-213 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/27/86 

APU 

312 


HIGHEST CRITICALITY HDW/FUNC 
PLIGHT: 3/3 

ABORT: /NA 


ITEM: FUEL VALVE GROUND CONTROL CIRCUIT 

FAILURE MODE: FAIL OFF, OPEN CIRCUIT, FAIL TO REMAIN ON 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL VALVE CONTROL CIRCUIT 

4) GROUND CONTROL CIRCUIT 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


flight phase 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING 

: /NA 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 

LOCATION: AV BAY 

4,5,6 



PART NUMBER: VS70-460109 




CAUSES: CONTAMINATION, SHORT TO GROUND, PIECE-PART STRUCTURAL 

FAILURE 


EFFECTS/RATIONALE : 

CANNOT OPEN VALVE TO DO GROUND PURGE OF FUEL SYSTEM; POSSIBLE 
LAUNCH DELAY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-214 



INDEPENDENT ORB I TER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/27/86 

APU 

313 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: /NA 


ITEM: FUEL VALVE GROUND CONTROL CIRCUIT 

FAILURE MODE: INADVERTENT OPERATION, FAIL ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL VALVE CONTROL CIRCUIT 

4) GROUND CONTROL CIRCUIT 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: VS70-460109 


CAUSES: SHORT 

EFFECTS/RATIONALE : 

THIS CIRCUIT IS NOT POWERED AFTER LIFTOFF-POSSIBLE LAUNCH DELAY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-215 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

APU 

314 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL TANK VALVE SWITCH 

FAILURE MODE: FAIL TO CLOSE 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL TANK VALVE CONTROL CIRCUIT 

4) SWITCH 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

B 

PRELAUNCH: 

3/3 

RTLS: 

/NA 


LIFTOFF: 

3/3 

TAL: 

/NA 


ONORBIT: 

3/3 

AOA: 

/NA 

— 

DEORBIT: 

2/1R 

ATO: 

2/1R 

■ 

LANDING/SAFING: 

2/1R 




REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

I Hill 


LOCATION: PANEL R2 

PART NUMBER: ME452-0102-7352 

CAUSES: CONTAMINATION, PIECE-PART STRUCTURAL FAILURE 

EFFECTS/RATIONALE : 

CANNOT OPEN FUEL TANK VALVES FOR ONE APU? APU IS LOST. 
CRITICALITY IS 2/1R DUE TO APU REDUNDANCY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-216 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

AFU 

315 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: FUEL TANK VALVE SWITCH 

FAILURE MODE: FAIL TO REMAIN CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 
1) APU 


HIERARCHY: 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


ELECTRICAL SYSTEM 

FUEL TANK VALVE CONTROL CIRCUIT 

SWITCH 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

• 1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: PANEL R2 

PART NUMBER: ME452-0102-7352 


CAUSES.: VIBRATION, MECHANICAL SHOCK 
EFFECTS/RATIONALE: 

LOSS OF APU. CRITICALITY IS 2/1R DUE TO APU REDUNDANCY. ABORT: 
CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS, WHERE LOSS OF ONE APU 
CAN BE CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-217 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 

ITEM: FUEL TANK VALVE SWITCH 

FAILURE MODE: FAIL TO OPEN 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


DATE: 10/15/86 

SUBSYSTEM: APU 

MDAC ID: 316 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL TANK VALVE CONTROL CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

3 ) 

9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

2/1R 

AOA: 

1/1 

ATO: 

3/3 



REDUNDANCY SCREENS: A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

1/1 


C [ F ] 


LOCATION: PANEL R2 

PART NUMBER: ME452-0102-7352 


CAUSES: PIECE-PART STRUCTURAL FAILURE, CONTAMINATION 

EFFECTS/RATIONALE: 

CANNOT CLOSE FUEL TANK VALVES. APU WILL SHUT DOWN WHEN SECONDARY 
FUEL VALVE CLOSES. WITHOUT FUEL FLOW, VALVE WILL OVERHEAT gggL - 
CAN LEAD TO FUEL DETONATION AND FUEL LEAK. THIS CAN CAUSE FIRE 
DURING ENTRY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-218 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

APU 

317 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: FUEL TANK VALVE SWITCH 

FAILURE MODE: INADVERTENT OPERATION 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL TANK VALVE CONTROL CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

• 3/3 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ 1 ] 


LOCATION: PANEL R2 

PART NUMBER: ME452-0102-7352 


CAUSES: CONTAMINATION (SHORT) 

EFFECTS/RATIONALE: 

BOTH FUEL TANK VALVES FOR ONE APU OPEN UP. FUEL IS STOPPED BY 
SECONDARY FUEL VALVE. WITHOUT FUEL FLOW, VALVE OVERHEATS, AND 
FUEL CAN DETONATE, CAUSING FUEL LEAK. THIS CAN CAUSE FIRE DURING 
ENTRY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-219 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

AFU 

318 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: FUEL TANK VALVE CIRCUIT DRIVER 

FAILURE MODE: FAIL OFF, OR SHORT TO GROUND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL TANK VALVE CONTROL CIRCUIT 

4) CIRCUIT DRIVER 

5) 

6 ) 

7 ) 

8 ) 

9 ) . 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ l 3 

B [ P 3 

C [ P ] 


LOCATION: AFT LCA 1,2,3 

PART NUMBER: MC477-0263-0002 


CAUSES: MANUFACTURING DEFECT, VIBRATION, CONTAMINATION 


EFFECTS/RATIONALE: 

LOSS OF REDUNDANT FUEL TANK VALVE; OTHER VALVE ALLOWS APU TO 
OPERATE. CRITICALITY IS 3/1R DUE TO VALVE AND APU REDUNDANCY. 
ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF 

ONE APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-220 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

AFU 

319 


HIGHEST CRITICALITY HDW/FUNC 
PLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL TANK VALVE CIRCUIT DRIVER 

FAILURE MODE: FAIL ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL TANK VALVE CONTROL CIRCUIT 

4) CIRCUIT DRIVER 

5) 

6 ) 

7) 

8) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION: AFT LCA 1,2,3 

PART NUMBER: MC477-0263-0002 


CAUSES : 

EFFECTS/RATIONALE : 

NO EFFECT, DUE TO OTHER CIRCUIT DRIVER IN SERIES. IF BOTH 
DRIVERS FAILED ON, VALVE COULD OVERHEAT AND DETONATE FUEL (FIRE 
HAZARD DURING ENTRY). CRITICALITY IS 2/1R: 1 FAILURE AWAY FROM 

CRITICALITY 1. 

NOTE: FOR APU 2, VALVE B, CRITICALITY IS 3/1R DUE TO 3 DRIVERS 

IN SERIES. 


REFERENCES: 


REPORT DATE 12/10/86 


C-221 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

APU 

320 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL TANK VALVE AUTO SHUTDOWN DRIVER 

FAILURE MODE: FAIL OFF, OR SHORT TO GROUND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL TANK VALVE CONTROL CIRCUIT 

4) AUTO SHUTDOWN DRIVER 

5) 

6 ) 

7) 

8 ) 

• ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3. 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] 


C [NA ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC477-02 61-0002 


CAUSES: CONTAMINATION, VIBRATION, INSTALLATION ERROR 

EFFECTS/RATIONALE : 

AUTOMATIC SHUTDOWN OF APU WILL NOT CLOSE ONE OF THE TWO FUEL TANK 
VALVES. APU WILL BE SHUT DOWN BY SECONDARY FUEL VALVE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-222 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/15/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

3/1R 

MDAC ID: 

321 

ABORT: 

2/1R 

ITEM: 

FUEL TANK 

VALVE AUTO SHUTDOWN DRIVER 


FAILURE MODE: FAIL ON 

LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL TANK VALVE CONTROL CIRCUIT 

4) AUTO SHUTDOWN DRIVER 

5) 

6 ) 

7) 

8 ) 

t> 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT LCA 1,2,3 

PART NUMBER: MC477-0261-0002 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

LOSS OF ONE OF THE TWO FUEL TANK VALVES FOR ONE APU. THE OTHER 
VALVE ALLOWS THE APU TO CONTINUE OPERATING. CRITICALITY IS 3/1R 
DUE TO REDUNDANCY OF VALVES AND APU'S. 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF 

ONE APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-223 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 10/15/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 3/1R 

MDAC ID: 322 ABORT: 2/1R 

ITEM: FUEL TANK VALVE SWITCH POWER FUSE 

FAILURE MODE: FAIL OPEN 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL TANK VALVE CONTROL CIRCUIT 

4) SWITCH POWER FUSE 

5) 

6 ) 

7) 

8 ) 

• > 


CRI TICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES : 

EFFECTS/RATIONALE : , . ~ i 

LOSS OF ONE OF THE REDUNDANT FUEL TANK VALVES FOR ONE APU. 
CRITICALITY IS 3/1R DUE TO VALVE AND APU RE DUNDAN CY. ABORT: 
CRITICALITY IS 2/1R FOR ENGINE -OUT ABORTS, WHERE LOSS OF ONE APU 
CAN BE CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-224 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/15/86 

APU 

323 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: FUEL TANK VALVE SWITCH OUTPUT DIODE 

FAILURE MODE: FAIL OPEN, OR SHORT TO GROUND 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL TANK VALVE CONTROL CIRCUIT 

4) SWITCH OUTPUT DIODE 

5) 

6 ) 

7) 

8 ) 

• > 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION: AFT LCA 1,2,3 

PART NUMBER: 


CAUSES: MANUFACTURING DEFECT, PIECE-PART STRUCTURAL FAILURE 

EFFECTS/RATIONALE : 

LOSS OF ONE OF THE REDUNDANT FUEL TANK VALVES FOR ONE APU. 
CRITICALITY IS 3/1R DUE TO VALVE AND APU REDUNDANCY. ABORT: 
CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF ONE APU 
CAN BE CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-225 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/23/86 

APU 

324 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL TANK VALVE INDICATOR SWITCH 

FAILURE MODE: FAIL OPEN, FAIL TO REMAIN CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL TANK VALVE INDICATOR SWITCH 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC284-0558-000X 


CAUSES: CONTAMINATION, VIBRATION, MECHANICAL SHOCK, PIECE-PART 

STRUCTURAL FAILURE 


EFFECTS/RATIONALE : 

FUEL TANK VALVE POSITION INDICATOR ALWAYS SHOWS "CLOSED" FOR 
AFFECT ED VALVE. CAN'T TELL VALVE FAILURE FROM INDICATOR FAILURE, 
DUE TO REDUNDANT VALVE IN PARALLEL. ASSUME VALVE FAILURE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-226 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/23/86 

APU 

325 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


TTRM* FUEL TANK VALVE INDICATOR SWITCH 

FAILURE MODE: FAIL TO OPEN, INADVERTENT OPERATION 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

ELECTRICAL SYSTEM 
FUEL TANK VALVE INDICATOR SWITCH 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS: 
TAL: 
AOA: 
ATO: 


REDUNDANCY SCREENS: A [NA ] B [NA ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC284-0558-000X 


CAUSES: SHORT, CONTAMINATION 


INDICATION ALWAYS SHOWS "OPEN" FOR 
AFFECTED VALVE, BUT DOWNSTREAM READING CONFIRMS VALVE CLOSED 
(GROUND ONLY). 


REFERENCES : 


REPORT DATE 12/10/86 


C-227 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/12/86 

SUBSYSTEM: APU 

MDAC ID: 326 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: "PUMP/VLV COOL" SWITCH 

FAILURE MODE: FAIL TO CLOSE, FAIL TO REMAIN CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) "PUMP/VLV COOL" SWITCH 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FU1 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

c [ p ] 


LOCATION: PANEL R2 

PART NUMBER: ME452-0102-7301 


CAUSES: CONTAMINATION, PIECE-PART STRUCTURAL FAILURE 

EFFECTS/RATIONALE : 

LOSS OF ONE OF TWO FUEL PUMP/GGVM COOLING SYSTEMS. CRITICALITY 
IS 2/1R FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT CAN 
CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-228 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/16/86 

AFU 

327 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "PUMP/VLV COOL" SWITCH 

FAILURE MODE: FAIL TO OPEN 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) "PUMP/VLV COOL" SWITCH 

5) 

6) 

7) 

8 ) 

9 ) 

CRITICALITIES 


GOT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

/NA 

RTLS: 

/NA 

LIFTOFF: 

3/3 

TAL: 

/NA 

ONORBIT: 

3/3 

AOA: 

/NA 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



NCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: 
PART NUMBER: 


PANEL R2 
ME452-0102-7301 


CAUSES: PIECE-PART STRUCTURAL FAILURE, CONTAMINATION (SHORT) 


EFFECTS/RATIONALE : 

CANNOT DEACTIVATE COOLING SYSTEM; VALVES MAY OVERHEAT AND BE 
DAMAGED. NO ADVERSE EFFECTS, OTHERWISE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-229 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/12/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 2/1R 

MDAC ID: 328 ABORT: 2/1R 

ITEM: "PUMP/VLV COOL" SWITCH 

FAILURE MODE: INADVERTENT OPERATION 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) "PUMP/VLV COOL" SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: . 

LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC ABORT 

3/3 RTLS: 

3/3 TAL: 

3/3 AOA: 

2/1R ATO: 

3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

2/1R 


REDUNDANCY SCREENS: A [ 2 ] 


B [ P ] C [ P "] 


LOCAT ION: PANEL R2 

PART NUMBER: ME452-0102-7301 

CAUSES: VIBRATION, CONTAMINATION (SHORT) 


EFFECTS/RATIONALE : 

ONE COOLING SYSTEM IS ACTIVATED AND OPERATES UNTIL DEPLETION OF 
WATER. CRITICALITY IS 2/1R FOR DEORBIT BEFORE APU COOLDOWN. APU 
STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-230 


independent orbiter assessment 

ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/12/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: AFU FLIGHT: 3/1R 

MDAC ID: 329 ABORT: 3/1R 

ITEM: "PUMP/VLV COOL" SWITCH POWER FUSE 

FAILURE MODE: FAIL OPEN 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) SWITCH POWER FUSE 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

. 3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION: PANEL R2 

PART NUMBER: ME451-0018-0100 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR 

EFFECTS/RATIONALE: 

LOSS OF ONE SWITCH CONTACT: LOSS OF REDUNDANT CONTROL CIRCUIT TO 

2 APU COOLING VALVES IN ONE OF TWO REDUNDANT COOLING SYSTEMS. 
CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN. OTHERWISE, 
3/3. 


REFERENCES : 


REPORT DATE 12/10/86 


C-231 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/12/86 

SUBSYSTEM: APU 

MDAC ID: 330 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING CONTROL CIRCUIT POWER FUSE 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) CONTROL CIRCUIT POWER FUSE 

5) 

6 ) 

7) 

a) 

9) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/1R 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/1R 


REDUNDANCY SCREENS: A [ 2 ] B [ F ] 


C [ P ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: ME451-0018-0100 


CAUSES: MANUFACTURING DEFECT 
EFFECTS/RATIONALE : 

LOSS OF ONE OF TWO PATHS TO OPEN WATER COOLING VALVE FOR ONE OF 
TWO REDUNDANT COOLING SYSTEMS. CRITICALITY IS 3/1R FOR DEORBIT 
BEFORE APU COOLDOWN. 


REFERENCES: 


REPORT DATE 12/10/86 


C-232 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

APU 

331 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING CONTROL CIRCUIT POWER INPUT 

DIODE 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) POWER INPUT DIODE 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/ SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: JANTXV1N4246 

CAUSES: MANUFACTURING DEFECT, PIECE-PART STRUCTURAL FAILURE 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANT POWER TO WATER COOLING VALVE THERMOSTAT. 
CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED 
HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-233 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/16/86 

APU 

332 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM: FUEL PUMP/GGVM COOLING CONTROL CIRCUIT POWER INPUT 

DIODE 

FAILURE MODE: SHORT TO GROUND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) POWER INPUT DIODE 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: JANTXV1N4246 


CAU SES : CONTAMINATION 

EFFECTS/RATIONALE: 

LOSS OF POWER TO REDUNDANT VALVE CONTROL CIRCUIT, WHEN FUSE 
BLOWS. CRITICALITY IS 3/1R FOR DE ORB IT BEFORE APU COOLDOWN. APU 
STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-234 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

AFU 

333 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING CONTROL CIRCUIT INPUT 

RESISTOR 

FAILURE MODE: FAIL OPEN, OR HIGH RESISTANCE 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) POWER INPUT DIODE 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

c [ P ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: RER65F2150M 


CAUSES: VIBRATION, MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

LOSS OF REDUNDANT POWER TO WATER COOLING VALVE THERMOSTAT. 
CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN. IF 
THERMOSTAT IS LOST, ONE COOLING SYSTEM IS LOST FOR ONE APU. APU 
STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-235 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/12/86 

SUBSYSTEM: APU 

MDAC ID: 334 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING CONTROL CIRCUIT INPUT 

RESISTOR 

FAILURE MODE: INTERNAL SHORT, LOW RESISTANCE, OR SHORT TO GROUND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 
1) APU 


HIERARCHY: 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


ELECTRICAL SYSTEM 

FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 
POWER INPUT RESISTOR 



CRITICALITIES 

FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/1R 

ATO: 

LANDING/ SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/1R 


REDUNDANCY SCREENS: A [ 2 ] 


B [ F ] C [ P ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: RER65F2150M 


CAUSES: CONTAMINATION, MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

LOSS OF POWER TO REDUNDANT VALVE CONTROL CIRCUIT, WHEN FUSE 
BLOWS. CRITICALITY IS 3/1R FOR DEORBI T BEFORE APU COOLDOWN. IF 
VALVE IS LOST, ONE COOLING SYSTEM IS LOST TO ONE APU. APU 
STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-236 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

AFU 

335 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING CONTROL CIRCUIT POWER INPUT 

DRIVER 

FAIUJRE MODE: FAIL OFF 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) POWER INPUT HYBRID CIRCUIT DRIVER 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

. 3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: MC477-0263-0002 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANT POWER TO ONE APU COOLING VALVE. CRITICALITY IS 
3/1R FOR DEORBIT BEFORE APU COOLDOWN. IF VALVE IS LOST, ONE 
COOLING SYSTEM IS LOST FOR ONE APU. APU STARTED HOT CAN CAUSE 
FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-237 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/17/86 

APU 

336 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL FUMP/GGVM COOLING CONTROL CIRCUIT POWER INPUT 

DRIVER 

FAILURE MODE: FAIL ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) POWER INPUT HYBRID CIRCUIT DRIVER 

5) 

6 ) 

7) . 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 

LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: MC477-0263-0002 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 


EFFECTS/RATIONALE: 

NO EFFECT DUE TO REDUNDANT DRIVER IN SERIES. IF BOTH FAILED ON, 
WITH APU CONTROLLER ON, COOLING VALVE WOULD OPEN, BUT WATER TANK 
VALVE WOULD PREVENT WATER FLOW. WITH COOLING ACTIVATED, WATER 
COULD FLOW CONTINUALLY AND BE DEPLETED EARLY (REDUNDANT COOLING 
SYSTEM WOULD BE UNAFFECTED). 


REFERENCES: 


REPORT DATE 12/10/86 


C-238 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

AFU 

337 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

3/1R 


ITEM: FUEL PUMP/GGVM COOLING CONTROL CIRCUIT POWER INPUT 

DRIVER 

FAILURE MODE: SHORT TO GROUND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) POWER INPUT HYBRID CIRCUIT DRIVER 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: MC477-0263-0002 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

WORST CASE EFFECT IS LOSS OF REDUNDANT POWER TO ONE APU COOLING 
VALVE. CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN. APU 
STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-239 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

APU 

338 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL PUMP/GGVM COOLING CONTROL CIRCUIT TIMING 

DRIVER 

FAILURE MODE: FAIL OFF, FAIL ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) TIMING DRIVER 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3. 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: MC477-026200002 

CAUSES: CONTAMINATION, MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

WORST CASE IS ONE COOLING VALVE STUCK OPEN FOR ONE APU, WHILE 
THAT COOLING SYSTEM IS ACTIVE. THIS SYSTEM CAN BE TURNED OFF, AND 
OTHER SYSTEM IS UNAFFECTED. 


REFERENCES: 


REPORT DATE 12/10/86 


C-240 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

APU 

339 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL FUMP/GGVM COOLING VALVE POWER DIODE 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) VALVE POWER DIODE 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: JANTXVIN5551 


CAUSES: MANUFACTURING DEFECT 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANT POWER TO ONE APU COOLING VALVE. CRITICALITY IS 
3/1R FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE 
FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-241 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/12/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 3/1R 

MDAC ID: 340 ABORT: 3/1R 

ITEM: FUEL PUMP/GGVM COOLING VALVE POWER DIODE 

FAILURE MODE: SHORT TO GROUND 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) VALVE POWER DIODE 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: JANTXVIN5551 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANT POWER TO APU COOLING VALVE, AFTER FUSE BLOWS IN 
CIRCUIT DRIVER. CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU 
COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-242 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/20/86 

AFU 

341 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM: FUEL PUMP/GGVM COOLING VALVE INDICATION RESISTOR 

FAILURE MODE: FAIL OPEN, OR HIGH RESISTANCE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) VALVE INDICATION RESISTOR 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: RLR0705101GR 


CAUSES: MANUFACTURING DEFECT 

EFFECTS/RATIONALE : 

LOSS OF STATUS INDICATION FOR ONE APU COOLING VALVE. NONCRITICAL 
MEASUREMENT. 


REFERENCES : 


REPORT DATE 12/10/86 


C-243 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

APU 

342 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL FUMP/GGVM COOLING VALVE INDICATION RESISTOR 

FAILURE MODE: INTERNAL SHORT, OR LOW RESISTANCE 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) VALVE INDICATION RESISTOR 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NU MBE R: RLR0705101GR 

CAUSES: CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF STATUS INDICATION FOR ONE APU COOLING VALVE. NONCRITICAL 
MEASUREMENT. 


REFERENCES : 


REPORT DATE 12/10/86 


C-244 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

APU 

343 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL FUMP/GGVM COOLING TANK VALVE POWER FUSE 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) TANK VALVE POWER FUSE 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT:. 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: ME452-0018-0100 


CAUSES: MANUFACTURING DEFECT, INSTALLATION ERROR 

EFFECTS/RATIONALE : 

LOSS OF ONE OF 3 REDUNDANT POWER SOURCES FOR ONE OF 2 COOLING 
SYSTEM WATER TANK VALVES. CRITICALITY IS 3/1R FOR DEORBIT BEFORE 
APU COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-245 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

APU 

344 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP/GGVM COOLING TANK VALVE DRIVER 

FAILURE MODE: FAIL OFF, OPEN CIRCUIT, SHORT TO GROUND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 
1) APU 


HIERARCHY: 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


ELECTRICAL SYSTEM 

FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 
WATER TANK VALVE DRIVER 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B(P] 

C [ P ] 

LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: MC477-02 63-0002 


r: ~ r- ' 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION, VIBRATION 

EFFECTS/RATIONALE: - ;~-:r 

LOSS OF ONE OF 3 REDUNDANT DRIVERS FOR ONE OF 2 COOLING SYSTEM 
WATER TANK VALVES. CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU 
COOLDOWN. APU STARTED HOT CAN CAUSE FUEL TO DETONATE. "• 


REFERENCES : 


REPORT DATE 12/10/86 


C-246 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

HDW/FUNC 
3/3 
3/3 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) WATER TANK VALVE DRIVER 

5) 

6 ) 

7) 

8 ) 

9 ) 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

APU 

345 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: FUEL PUMP/GGVM COOLING TANK VALVE DRIVER 

FAILURE MODE: FAIL ON 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: APU TIMER BOX 1,2,3 

PART NUMBER: MC477-0263-0002 

9 

CAUSES: MANUFACTURING DEFECT, CONTAMINATION 

EFFECTS/RATIONALE : 

WATER TANK VALVE OPENS AS SOON AS APU CONTROLLER IS POWERED UP. 
WATER CONTROL VALVE DOWNSTREAM PREVENTS WATER DEPLETION. VALVE 
MAY OVERHEAT. NO OTHER EFFECTS. 


REFERENCES : 


REPORT DATE 12/10/86 


C-247 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

AFU 

346 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: FUEL PUMP/GGVM COOLING THERMOSTAT 

FAILURE MODE: FAIL OPEN 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) THERMOSTAT 

5) 

6) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/3 

2/1R 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

2/1R 

REDUNDANCY SCREENS: 

A [ 2 ] 

SEP] 

c [ p ] 

LOCATION: AFT COMPARTMENT 

PART NUMBER: 

• 


CAUSES: CONTAMINATION 




EFFECTS/RATIONALE : 

LOSS OF ONE OF TWO COOLING SYSTEMS 

FOR ONE APU. 

CRITICALITY 


2/1R FOR DEORBIT BEFORE APU COOLDOWN. APU STARTED HOT CAN CAUSE 
FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-248 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 10/20/86 

SUBSYSTEM: AFU 

MDAC ID: 347 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: FUEL FUMP/GGVM COOLING THERMOSTAT 

FAILURE MODE: FAIL CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL PUMP/GGVM COOLING CONTROL CIRCUIT 

4) THERMOSTAT 

5) 

6 ) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 
3/3 ■ 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: 

CAUSES: CONTAMINATION (SHORT) 


EFFECTS/RATIONALE : 

COOLING VALVE PULSES CONTINUOUSLY, REGARDLESS OF APU TEMPERATURE, 
BUT CAN BE TURNED OFF BY SWITCH. POSSIBLE DEPLETION OF COOLING 
WATER FROM ONE SYSTEM. 


REFERENCES: 


REPORT DATE 12/10/86 


C-249 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

APU 

348 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: "APU HEATER-TANK/FUEL LINE/H20 SYS" SWITCH 

FAILURE MODE: FAIL TO CLOSE, FAIL TO REMAIN CI/5SED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL/H2 0 HEATER CONTROL CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: PANEL A12 

PART NUMBER: 

CAUSES: CONTAMINATION, PIECE-PART STRUCTURAL FAILURE 

EFFECTS/RATIONALE : 

LOSS OF ONE SET OF HEATERS FOR ONE APU'S FUEL TANK, FUEL LINES, 
AND WATER LINES, PLUS REDUNDANT HEATERS FOR ONE WATER TANK AND 
COMMON WATER LINES. LOSS OF BOTH SETS OF HEATERS WOULD ALLOW 
LINES TO FREEZE, RESULTING IN LOSS OF ONE APU. 

CRITICALITY IS 3/1R DUE TO HEATER AND APU REDUNDANCY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-250 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

APU 

349 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: APU HEATER, TANK/FUEL LINE/H20 SYS SWITCH 

FAILURE MODE: FAIL TO OPEN, INADVERTENT OPERATION 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL/H20 HEATER CONTROL CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: A 

[NA ] 

B [NA ] 

C [NA ] 

LOCATION: PANEL A12 

PART NUMBER: 

• 





CAUSES: PIECE-PART STRUCTURAL FAILURE, CONTAMINATION (SHORT) 


EFFECTS/RATIONALE : 

CANNOT DEACTIVATE ONE SET OF HEATERS FOR ONE APU'S FUEL TANK, 

FUEL LINES, AND WATER LINES, PLUS REDUNDANT HEATERS FOR ONE WATER 
TANK AND COMMON WATER LINES. NO ADVERSE EFFECTS. OTHER SET OF 
HEATERS UNAFFECTED. 


REFERENCES: 


REPORT DATE 12/10/86 


C-251 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 20/86 

AFU 

350 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL/H20 HEATER CONTROL CIRCUIT 

FAILURE MODE: OPEN CIRCUIT, SHORT TO GROUND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL/H2 0 LINE HEATER CONTROL CIRCUIT 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/1R 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/1R 


REDUNDANCY SCREENS: A [ 2 ] B[P] C[P] 

LOCATION: AV BAY 4,5,6 

PART NUMBER: VS70-460109 




CAUSES: INSTALLATION ERROR, HANDLING DAMAGE, CONTAMINATION 


EFFECTS/RATIONALE: 

LOSS OF ONE SET OF REDUNDANT HEATERS FOR ONE APU'S FUEL TANK, 
FUEL LINES, OR WATER LINES, OR ONE WATER TANK. LOSS OF BOTH SETS 
OF HEATERS WOULD ALLOW LINES TO FREEZE, RESULTING IN, AS A WORST 
CASE, LOSS OF ONE APU. CRITICALITY IS 3/1R DUE TO HEATER 
AND APU REDUNDANCY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-252 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/26/86 

APU 

351 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL/H20 HEATER CONTROL CIRCUIT 

FAILURE MODE: CIRCUIT DRIVER FAIL ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL/H2 0 LINE HEATER CONTROL CIRCUIT 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ F ] 


LOCATION: AV BAY 4,5,6 (AFT LCA 1,2,3) 

PART NUMBER: VS70-460109 

CAUSES: MANUFACTURING DEFECT 


EFFECTS/RATIONALE: 

NO EFFECT, DUE TO MULTIPLE DRIVERS IN SERIES. IF ALL DRIVERS 
FAILED ON, HEATERS WOULD BE FAILED ON, LEADING TO OVERHEATING AND 
FUEL DETONATION. CRITICALITY IS 3/1R, DUE TO ENTRY FIRE HAZARD 
BEING TWO FAILURES AWAY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-253 





INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 11/26/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 1/1 

MDAC ID: 352 ABORT: 1/1 

ITEM: FUEL/H20 HEATER CONTROL CIRCUIT 

FAILURE MODE: FUEL PUMP DRAIN LINE HEATER THERMOSTAT INPUT 

DRIVER FAIL ON 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) FUEL/H20 LINE HEATER CONTROL CIRCUIT 

4) FUEL PUMP DRAIN LINE HEATER THERMOSTAT INPUT DRIVER 

5) 

6 ) 

7) 

a) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/1R 

AOA: 

3/3 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AV BAY 4,5,6 (AFT LCA 1,2,3) 

PART NUMBER: VS70-460109 


CAUSES: MANUFACTURING DEFECT, SHORT 


EFFECTS/RATIONALE : 

HEATER IS STUCK ON IF HEATER SWITCH IS IN "AUTO" POSITION - IF 
FUEL IS PRESENT IN LINE, IT WILL OVERHEAT AND DETONATE BEFORE FDA 
ALARM. FUEL LEAK - FIRE HAZARD. CRITICALITY IS 1/1 DUE TO FIRE 
HAZARD. 


REFERENCES: ROCKWELL INTERN ATIONAL RECOMMENDED CIL CHANGE 6-13- 

86 (CIL 1219.2). ROCKWELL INTERNATIONAL PRESENTATION "APU DRAIN 
LINE HEATER SAFETY CONCERN", PRESENTED BY J.L. SCHAEFER, JUNE 
1986. 


REPORT DATE 12/10/86 


C-254 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

APU 

353 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: "APU HEATER-GAS GEN/ FUEL PUMP" SWITCH 

FAILURE MODE: FAIL TO CLOSE, FAIL TO REMAIN CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) GG/FUEL PUMP HEATER CONTROL CIRCUIT 

4) SWITCH 

5) 

6) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: PANEL A12 

PART NUMBER: 


CAUSES: CONTAMINATION, PIECE-PART STRUCTURAL FAILURE 

EFFECTS/RATIONALE : 

LOSS OF ONE SET OF GAS GENERATOR BED HEATERS AND FUEL PUMP/GGVM 
HEATERS, FOR ONE APU. IF BOTH SETS OF HEATERS ARE LOST, FUEL CAN 
FREEZE AND APU WILL BE LOST. CRITICALITY IS 3/1R DUE TO HEATER 
AND APU REDUNDANCY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-255 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

APU 

354 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: "APU HEATER-GAS GEN/FUEL PUMP" SWITCH 

FAILURE MODE: FAIL TO OPEN 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) GG/FUEL PUMP HEATER CONTROL CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AO A: 

DEORBIT: 

3/1R 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/1R 


REDUNDANCY SCREENS: A[2] B [ P ] C [ P ] 


LOCATION: PANEL A12 

PART NUMBER: 


CAUSES: PIECE-PART STRUCTURAL FAILURE, CONTAMINATION (SHORT) 


EFFECTS /RAT IONALE : 

CANNOT DEACTIVATE ONE SET OF HEATERS OR ACTIVATE REDUNDANT SET 
(FOR ONE APU ). STARTING APU WILL AUTOMATICALLY INHIBIT THESE 
HEATERS. CRITICALITY IS 3/1R DUE TO HEATER AND APU REDUNDANCY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-256 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

AFU 

355 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: GAS GEN/FUEL PUMP HEATER CONTROL CIRCUIT 

FAILURE MODE: OPEN CIRCUIT, SHORT TO GROUND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) GG/FUEL PUMP HEATER CONTROL CIRCUIT 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLSr 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: AFT LCA 

1,2,3 



PART NUMBER: VS70-460109 



CAUSES: INSTALLATION 

ERROR, HANDLING DAMAGE 



EFFECTS/RATIONALE : 

LOSS OF ONE OF TWO REDUNDANT HEATERS FOR ONE APU'S GAS GENERATOR 
BED OR GGVM/FUEL PUMP. LOSS OF BOTH HEATERS WOULD ALLOW FUEL TO 
FREEZE, CAUSING LOSS OF APU. CRITICALITY IS 3/1R DUE TO HEATER 
AND APU REDUNDANCY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-257 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

APU 

356 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: GAS GEN/FUEL PUMP HEATER CONTROL CIRCUIT 

FAILURE MODE: CIRCUIT DRIVER FAIL ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) GG/FUEL PUMP HEATER CONTROL CIRCUIT 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/1R 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/ IE 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ F ] 


LOCATION: AFT LCA 1,2,3 

PART NUMBER: VS70-460109 


CAUSES: MANUFACTURING DEFECT 


EFFECTS/RATIONALE: 

NO EFFECT, DUE TO TWO DRIVERS IN SERIES. IF BOTH DRIVERS FAILED 
ON, ONE AFU'S GAS GENERATOR BED HEATER OR FUEL PUMP/GGVM HEATER 
WOULD BE FAILED ON, RESULTING IN FUEL OVERHEATING AND DETONATION. 
CRITICALITY IS 2/1R (ONE FAILURE AWAY FROM CRITICALITY 1/1). 


REFERENCES: 


REPORT DATE 12/10/86 


C-258 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

APU 

357 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: "APU HEATER, LUBE OIL LINE" SWITCH 

FAILURE MODE: FAIL TO CLOSE, FAIL TO REMAIN CLOSED 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) LUBE OIL LINE HEATER CONTROL CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

c [ p ] 


LOCATION: PANEL A12 

PART NUMBER: 

CAUSES: CONTAMINATION, PIECE-PART ^STRUCTURAL FAILURE 


EFFECTS/RATIONALE : 

WORST CASE IS LOSS OF ALL LUBE OIL LINE HEATERS FOR ONE APU; LUBE 
OIL TEMP WILL DROP BELOW ODEG. F. AND APU WILL BE LOST. 
CRITICALITY IS 2/1R DUE TO APU REDUNDANCY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-259 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

APU 

358 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: "APU HEATER, LUBE OIL LINE" SWITCH 

FAILURE MODE: FAIL TO OPEN 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) LUBE OIL LINE HEATER CONTROL CIRCUIT 

4) SWITCH 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDTNG/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

c [ p ] 

LOCATION: PANEL A12 



PART NUMBER: 





CAUSES: CONTAMINATION (SHORT), PIECE-PART STRUCTURAL FAILURE 

EFFECTS/RATIONALE : 

ONE SET OF LUBE OIL LINE HEATERS IS FAILED ON, AND OTHER SET 
CAN'T BE ACTIVATED (WORST CASE). CRITICALITY IS 3/1R, SINCE 
HEATER REDUNDANCY IS LOST FOR ONE APU. 


REFERENCES: 


REPORT DATE 12/10/86 


C-260 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

AFU 

359 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "AFU HEATER, LUBE OIL LINE" SWITCH 

FAILURE MODE: INADVERTENT OPERATION 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) LUBE OIL LINE HEATER CONTROL CIRCUIT 

4) SWITCH 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: PANEL A12 

PART NUMBER: 


CAUSES: CONTAMINATION (SHORT), VIBRATION 

EFFECTS/RATIONALE : 

ONE SET OF LUBE OIL LINE HEATERS IS FAILED ON; OTHER SET IS 
UNAFFECTED. NO ADVERSE EFFECTS ON APU. 


REFERENCES : 


REPORT DATE 12/10/86 


C-261 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/12/86 

AFU 

360 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: LUBE OIL LINE HEATER CONTROL CIRCUIT 

FAILURE MODE: OPEN CIRCUIT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) LUBE OIL LINE HEATER CONTROL CIRCUIT 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING 

: 3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: AV BAY 

4,5,6 



PART NUMBER: VS70-460109 




CAUSES: HANDLING DAMAGE, INSTALLATION ERROR 


EFFECTS/RATIONALE : 

WORST CASE IS LOSS OF ONE OF TWO SETS OF LUBE OIL LINE HEATERS 
FOR ONE APU. IF ALL HEATERS ARE LOST, LUBE OIL TEMP W ILL DROP 
BELOW 0 DEG. F. AND APU WILL BE LOST. CRITICALITY IS 3/1R DUE TO 
HEATER AND APU REDUNDANCY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-262 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

AFU 

361 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: LUBE OIL LINE HEATER CONTROL CIRCUIT 

FAILURE MODE: DRIVER FAIL ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) LUBE OIL LINE HEATER CONTROL CIRCUIT 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING 

: 3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 

LOCATION: AV BAY 

4,5,6 



PART NUMBER: VS70-460109 



’CAUSES: MANUFACTURING DEFECT 




EFFECTS/RATIONALE : 

NO EFFECT, DUE TO 3 DRIVERS IN SERIES. IF ALL DRIVERS FAILED ON, 
HEATER WOULD BE FAILED ON. NO ADVERSE EFFECTS ON APU. 


REFERENCES: 


REPORT DATE 12/10/86 


C-263 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/23/86 

APU 

362 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: BITE INITIATE DRIVER 

FAILURE MODE: FAIL OFF, FAIL TO REMAIN ON 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) BITE CIRCUIT 

4) DRIVER 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] C [NA ] 


LOCATION: AFT LCA 1,2,3 

PART NUMBER: MC477-0261-0002 


CAUSES: CONTAMINATION, PIECE-PART STRUCTURAL FAILURE 

EFFECTS/RATIONALE : 

NO BITE FUNCTION FOR APU CONTROLLER-POSSIBLE LAUNCH DELAY. BITE 
IS NOT USED DURING FLIGHT. 


REFERENCES : 


REPORT DATE 12/10/86 


C-264 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/23/86 

APU 

363 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: /NA 


ITEM: BITE INITIATE DRIVER 

FAILURE MODE: FAIL ON, INADVERTENT OPERATION 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) ELECTRICAL SYSTEM 

3) BITE CIRCUIT 

4) DRIVER 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

/NA 


* 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT LCA 1,2,3 

PART NUMBER: MC477-0261-0002 


CAUSES: CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE IS ONLY POSSIBLE PRE-LAUNCH, AND WILL INHIBIT APU START - 
LAUNCH DELAY. THIS DRIVER RECEIVES NO POWER AFTER LIFTOFF. 


REFERENCES : 


REPORT DATE 12/10/86 


C-265 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 

DATE: 10/21/86 HIGHEST CRITICALITY HDW/FUNC 

SUBSYSTEM: APU FLIGHT: 3/3 

MDAC ID: 364 ABORT: 3/3 

ITEM: "APU FUEL/H20 QTY" GAUGE 

FAILURE MODE: NO OUTPUT, OR ERRONEOUS OUTPUT 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) DISPLAYS 

3) FUEL QUANTITY GAUGE 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

, CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 

LOCATION: PANEL F8 

PART NUMBER: 





CAUSES: M ANUFA CTURING DEFECT, PIECE-PART STRUCTURAL FAILURE, 
VIBRATION, MECHANICAL SHOCK, CONTAMINATION 


EFFECTS/RATIONALE : 

LOSS OF FUEL QUANTITY READING FOR ONE APU. FUEL TANK PRESSURE 
STILL AVAILABLE TO CREW ON CRT (2 READINGS), AND TELEMETERED TO 
GROUND. APU STILL USABLE WITH ALL THESE MEASUREMENTS LOST. 


REFERENCES : 


REPORT DATE 12/10/86 


C-266 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

AFU 

365 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "AFU FUEL/H20 QTY" SWITCH 

FAILURE MODE: FAIL TO CLOSE, FAIL TO REMAIN CLOSED 


LEAD 

ANALYST: J. BARNES 

BREAKDOWN HIERARCHY: 

1) 

APU 

2) 

DISPLAYS 

3) 

FUEL QUANTITY GAUGE 

4) 


5) 


6) 


7) 


8) 


9) 



SUBSYS LEAD: J. BARNES 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: PANEL F8 

PART NUMBER: 


CAUSES: CONTAMINATION, PIECE-PART STRUCTURAL FAILURE, VIBRATION, 

MECHANICAL SHOCK 


EFFECTS/RATIONALE : 

LOSS OF FUEL QUANTITY MEASUREMENT FOR ALL 3 APU'S. FUEL TANK 
PRESSURE STILL AVAILABLE TO CREW ON CRT AND TELEMETERED TO 
GROUND. APU STILL USABLE WITH ALL THESE MEASUREMENTS LOST. 


REFERENCES: 


REPORT DATE 12/10/86 


C-267 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

APU 

366 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "APU FUEL/H2 0 QTY" SWITCH 

FAILURE MODE: FAIL TO OPEN, INADVERTANT OPERATION 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) DISPLAYS 

3) FUEL QUANTITY GAUGE 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS:, 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: PANEL F8 

PART NUMBER: 


CAUSES: CONTAMINATION (SHORT), PIECE-PART STRUCTURAL FAILURE, 

VIBRATION ~ :: 


EFFECTS/RATIONALE : 

GAUGE ONLY READS FUEL QUANTITY, NO WATER SPRAY BOILER WATER 
QUANTITY. 


REFERENCES: 


REPORT DATE 12/10/86 


C-268 


DATE: 

SUBSYSTEM: 
MDAC ID: 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


10/21/86 

APU 

367 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "APU FUEL PRESS" GAUGE 

FAILURE MODE: NO OUTPUT, OR ERRONEOUS OUTPUT 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) DISPLAYS 

3) FUEL PRESSURE GAUGE 

4) 

5) 

6) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: PANEL F8 

PART NUMBER: 


CAUSES: MANUFACTURING DEFECT, PIECE-PART STRUCTURAL FAILURE, 

VIBRATION, MECHANICAL SHOCK, CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF FUEL PRESSURE READING FOR ALL 3 APU'S; FUEL PRESSURE IS 
STILL AVAILABLE ON CRT (2 READINGS) AND TELEMETERED TO GROUND. 
FUEL QUANTITY AVAILABLE IN GAUGE AND TELEMETERED TO GROUND. APU'S 
STILL USABLE WITH ALL MEASUREMENTS LOST. 


REFERENCES: 


REPORT DATE 12/10/86 


C-269 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

APU 

368 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "APU EGT" GAUGE 

FAILURE MODE: NO OUTPUT/ OR ERRONEOUS OUTPUT 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) DISPLAYS 

3) EXHAUST GAS TEMPERATURE GAUGE 

4) 

5) 

6 ) 

7 ) 

8 ) 

8 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] C [NA ] 


LOCATION: PANEL F8 

PART NUMBER: 


CAUSES: MANUFACTURING DEFECT, PIECE-PART STRUCTURAL FAILURE, 

VIBRATION, MECHANICAL SHOCK, CON TAMINATI ON 

EFFECTS/RATIONALE : 

LOSS OF EGT READING FOR ALL 3 APU'S; EGT IS STILL AVAIL ABLE ON 
CRT (2 READINGS) AND TELEMET ERED T O THE GROUND. APU'S ARE STILL 
USABLE WITH ALL EGT MEASUREMENTS LOST. 


REFERENCES : 


REPORT DATE 12/10/86 


C-270 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

APU 

369 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "APU OIL TEMP" GAUGE 

FAILURE MODE: NO OUTPUT, OR ERRONEOUS OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 
1) APU 


HIERARCHY: 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


DISPLAYS 

LUBE OIL TEMPERATURE GAUGE 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

■ LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 



HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] 


C [NA ] 


LOCATION: PANEL F8 

PART NUMBER: 


CAUSES: MANUFACTURING DEFECT, PICE-PART STRUCTURAL FAILURE, 

VIBRATION, MECHANICAL SHOCK, CONTAMINATION 

EFFECTS/RATIONALE : 

LOSS OF OIL TEMP READING FOR ALL 3 APU'S. OIL TEMP IS STILL 
AVAILABLE TO CREW ON CRT (2 READINGS + 2 GEARBOX TEMP READINGS), 
AND TELEMETERED TO GROUND. APU IS STILL USABLE WITH ALL OIL TEMP 
MEASUREMENTS LOST. 


REFERENCES : 


REPORT DATE 12/10/86 


C-271 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

AFU 

370 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: 

FAILURE MODE: 


GAUGING AFU SELECT SWITCH 

FAIL TO CLOSE, FAIL TO REMAIN CLOSED 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) DISPLAYS 

3) GAUGING APU SELECT SWITCH 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: ' 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



NDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: 
PART NUMBER: 


PANEL F8 


CAUSES: CONTAMINATION, PIECE-PART STRUCTURAL FAILURE, VIBRATION, 

MECHANICAL SHOCK 


EFFECTS/RATIONALE : 

WORST CASE EFFECT IS LOSS OF EGT, FUEL PRESSURE, AND OIL TEMP 
READINGS FOR ALL 3 AFU'S. ALL ARE BACKED UP BY CRT READINGS AND 
TELEMETRY. APU IS USABLE WITH ALL THESE MEASUREMENTS LOST. 


REFERENCES : 


REPORT DATE 12/10/86 C-272 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

APU 

371 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: GAUGING APU SELECT SWITCH 

FAILURE MODE: FAIL TO OPEN, INADVERTENT OPERATION 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) DISPLAYS 

3) GAUGING APU SELECT SWITCH 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: PANEL F8 

PART NUMBER: 


CAUSES: PIECE-PART STRUCTURAL FAILURE, CONTAMINATION (SHORT), 

VIBRATION 

EFFECTS/RATIONALE : 

WORST CASE EFFECT, GAUGE READS EGT, FUEL PRESSURE, AND OIL TEMP 
FOR ONE APU ONLY. OTHER APU READINGS ARE BACKED UP BY CRT 
READINGS AND TELEMETRY. APU'S ARE USABLE WITH ALL THESE 
MEASUREMENTS LOST. 


REFERENCES : 


REPORT DATE 12/10/86 


C-273 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

10/21/86 

HIGHEST CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

APU 

FLIGHT: 

3/3 

MDAC ID: 

372 

ABORT: 

3/3 

ITEM: 

"APU/HYD READY 

TO START" TALKBACK 


FAILURE MODE: FAIL OFF 



LEAD ANALYST: J. BARNES 

SUBSYS LEAD: J. BARNES 



BREAKDOWN HIERARCHY: 

1) APU 

2) DISPLAYS 

3) READY-TO-START TALKBACK 

4) 

5) 

6) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: ■ 
DEORBIT: 
LANDING/ SAFING: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] 


B [NA ] 


C [NA ] 


LOCATION: PANEL R2 . 

PART NUMBER: 


CAUSES: LOGIC FAILURE, CONTAMINATION, OPEN CIRCUIT, PIECE-PART 

STRUCTURAL FAILURE 


EFFECTS/RATIONALE : 

APU NEVER SHOWS "READY TO START" CONDITION. CO NDIT IONS CAN BE 
VERIFIED BY CRT OR TELEMETRY; APU IS OKAY TO START. 


REFERENCES : 


REPORT DATE 12/10/86 


C-274 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

APU 

373 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: "AFU/HYD READY TO START" TALKBACK 

FAILURE MODE: FAIL ON 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) DISPLAYS 

3) READY-TO-START TALKBACK 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 
HDW/FUNC ABORT 


3/3 

3/3 

3/3 

3/3 

3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY SCREENS: A [NA ] B [NA ] 


C [ N ] 


LOCATION: PANEL R2 

PART NUMBER: 


CAUSES: LOGIC FAILURE, CONTAMINATION 


EFFECTS/RATIONALE : 

APU ALWAYS SHOWS "READY TO START" CONDITION. CONDITION CAN BE 
VERIFIED BY CRT OR TELEMETRY. APU IS OKAY TO START. 


REFERENCES: 


REPORT DATE 12/10/86 


C-275 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

AFU 

374 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: GEARBOX N2 PRESSURE SENSOR V46P0151A(251,351) 

FAILURE MODE: NO OUTPUT, OR ERRONEOUS OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INSTRUMENTATION 

3) GEARBOX N2 PRESSURE SENSOR 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/ SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC2 01-0001 


CAUSES: MANUFACTURING DEFECT, PIECE-PART STRUCTURAL FAILURE, 

VIBRATION, MECHANICAL SHOCK, CONTAMINATION, HANDLING DAMAGE 

EFFECTS/RATIONALE : 

IF OUTPUT IS BELOW 5.5 PSIA, APU W ILL NOT START EXCEPT IN __ 
OVERRIDE. GEARBOX PRESSURIZATION V ALV E STAYS OPEN AFTER APU 
STARTUP, DUMPS GN2 BOTTLE INTO GEARBOX. A GEARBOX LEAK OR GN2 
LEAK CAN CAUSE LOSS OF APU. 

CRITICALITY IS 3/1R (GN2 LEAK + ANOTHER APU LOST - CRITICALITY 
1). ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS 
OF 1 APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-276 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10 / 22/86 

AFU 

375 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: GAS GENERATOR BED TEMPERATURE SENSOR 

V46T0122A(222,322) 

FAILURE MODE: NO OUTPUT, OR ERRONEOUS OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 



1) 

APU 


2) 

INSTRUMENTATION 


3) 

GAS GENERATOR BED TEMP 

— ■ 

4) 



5) 



6) 



7) 



8) 



9) 



SENSOR 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/1R 

ATO: 

3/3 



REDUNDANCY SCREENS: A [ 2 ] B [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: MC201-0001 


HDW/FUNC 

3/3 

3/3 

3/3 

3/1R 


C [ P ] 


CAUSES: MANUFACTURING DEFECT, PIECE-PART STRUCTURAL FAILURE, 

VIBRATION, MECHANICAL SHOCK, CONTAMINATION, HANDLING DAMAGE 


EFFECTS/RATIONALE : 

LOSS OF SENSOR, OR READING <190 F, MEANS LOSS OF NORMAL APU 
START; APU MUST BE STARTED IN OVERRIDE MODE. ALSO, GAS GENERATOR 
BED HEATERS ARE ON CONTINUOUSLY IN AUTO MODE IF SENSOR OUTPUT IS 
SHIFTED LOW, OR MUST REVERT TO BACKUP THERMOSTAT CONTROL 
IF SENSOR OUTPUT IS SHIFTED HIGH. NO EFFECT WHILE APU IS 
RUNNING. CRITICALITY IS 3/1R DUE TO LOSS OF 1 OF 2 METHODS FOR 
STARTING AN APU, AND APU REDUNDANCY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-277 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/25/86 

APU 

376 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL TEST LINE TEMPERATURE SENSOR V46T0183A 

(283,383) V46T0184A (284,384) 

FAILURE MODE: NO OUTPUT, OR ERRONEOUS OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INSTRUMENTATION 

3) FUEL TEST LINE TEMPERATURE SENSORS 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


FLIGHT PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 
3/3 
3/3 
3/1R 
3/1R ' 
3/1R 


ABORT 
RTLS: 
TAL: 
AO A: 
ATO: 


REDUNDANCY SCREENS: A [ 2 ] B [ P ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME449-0160-0003 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ F ] 


CAUSES: MANUFACTURING DEFECT, PIECE-PART STRUCTURAL FAILURE, 

VIBRATION, MECHANICAL SHOCK, CONTAMINATION, HANDLING DAMAGE 


EFFECTS/RATIONALE : _ ... , 

BOTH SENSORS ARE MOUNTED ON FUEL LINE CLAMP - A LOOSE CLAMP CAN 
RENDER BOTH SENSORS USELESS. WITH NO TEMPERATURE SENSING, A 
FAI LED-ON HEATER CAN CAUSE FUEL DETONATION AND FIRE HAZARD. 
CRITICALITY IS 3/1R (HEATER FAILED ON + 2 SENSORS FAILED m 
CRITICAL) . 


REFERENCES : 


REPORT DATE 12/10/86 


C-278 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/25/86 

APU 

377 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: FUEL PUMP SEAL CAVITY DRAIN LINE TEMPERATURE 

SENSOR V46T0186A (286,386) V46T0170A (270,370) 

FAILURE MODE: NO OUTPUT, OR ERRONEOUS OUTPUT 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INSTRUMENTATION 

3) FUEL PUMP SEAL CAVITY DRAIN 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/1R 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/3 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 2 ] 

B [ P ] 

C [ F ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: ME449-0160-0003 


CAUSES: MANUFACTURING DEFECT, PIECE-PART STRUCTURAL FAILURE, 

VIBRATION, MECHANICAL SHOCK, CONTAMINATION, HANDLING DAMAGE 

EFFECTS/RATIONALE : 

BOTH SENSORS ARE MOUNTED ON DRAIN LINE CLAMP - A LOOSE CLAMP CAN 
RENDER BOTH SENSORS USELESS. WITH NO TEMPERATURE SENSING, AND 
FUEL IN THE LINE FROM A FUEL PUMP SEAL LEAK, A FAILED-ON HEATER 
CAN CAUSE FUEL DETONATION AND FIRE HAZARD. 

CRITICALITY IS 3/1R (FUEL PUMP SEAL LEAK + HEATER FAILED ON + 2 
SENSORS FAILED - CRITICAL). 


REFERENCES : 


REPORT DATE 12/10/86 


C-279 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


10/21/86 

APU 

378 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: NONCRITICAL INSTRUMENTATION 

FAILURE MODE: NO OUTPUT, OR ERRONEOUS OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) INSTRUMENTATION 

3) NONCRITICAL INSTRUMENTATION 

4) 

5) 

6 ) 

7) 

8) 

9 ) 


CR ITI CALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORB1T: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/S AFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AFT COMPARTMENT 

PART NUMBER: NA 


CAUSES: CONTAMINATION, SHORT CIRCUIT, MANUFACTURING DEFECT, 

HA NDLIN G DAMAGE 


EFFECTS/RATIONALE : 

LOSS OF MEASUREMENT - APU IS STILL USABLE WITH LOSS OF ALL BACKUP 
MEASUREMENTS. NOTE: THIS CATEGORY INCLUDES ALL TRANSDUCERS NOT 
LISTED INDIVIDUALLY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-280 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/05/86 

APU 

379 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


ITEM: CONTROLLER SAFETY MONITORING 

FAILURE MODE: NO SHUTDOWN SIGNAL 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) SAFETY MONITORING 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

2/1R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ F ] 

C [ F ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC201-0Q01 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 


EFFECTS/RATIONALE : 

NO AUTOMATIC SHUTDOWN FOR APU OVERSPEED OR UNDERSPEED; POSSIBLE 
APU TURBINE OVERSPEED AND STRUCTURAL FAILURE. CRITICALITY IS 
2/1R: 1 FAILURE AWAY FROM CRITICALITY 1/1. 


REFERENCES: 


REPORT DATE 12/10/86 


C-281 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/05/86 

AFU 

380 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: CONTROLLER SAFETY MONITORING 

FAILURE MODE: SPURIOUS SHUTDOWN SIGNAL 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) SAFETY MONITORING 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 


CRITICALI TIES 


FLIGHT PHASE HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: AV BAY 4 

,5,6 


- 

PART NUMBER: MC2 01-0001 



CAUSES: . MANUFACTURING 

DEFECT, 

CONTAMINATION 



EFFECTS/RATIONALE : 

ONE APU WILL SHUT DOWN. CAN BE RESTARTED IN "INHIBIT" MODE. 
CRITICALITY IS 2/1R DUE TO APU REDUNDANCY. 

ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS, WHERE LOSS OF 1 
APU CAN BE CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-282 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/05/86 

APU 

381 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: CONTROLLER POWER SUPPLY 

FAILURE MODE: OPEN CIRCUIT, OR SHORT CIRCUIT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) POWER SUPPLY 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/1R 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/ SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC2 01-0001 


CAUSES: CONTAMINATION, BROKEN WIRE 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANT POWER TO APU CONTROLLER; IF BOTH POWER SUPPLIES 
ARE LOST, ONE APU IS LOST. CRITICALITY IS 3/1R, DUE TO POWER 
SUPPLY AND APU REDUNDANCY. 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-283 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANA LYS IS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/05/86 

APU 

382 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/1R 

2/1R 


ITEM: CONTROLLER PRIMARY SPEED CONTROL 

FAILURE MODE: LOSS OF OUTPUT, INTERMITTENT OUTPUT 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) SPEED CONTROL 

4) PRIMARY SPEED CONTROL 

5 ) 

6) 

7 ) 

8 ) 

9 ) 


CRITICALITI ES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/1R 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

c [ p ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 


EFFECTS/RATIONALE: — 

LOSS OF OUTPUT TO PRIMARY FUEL VALVE; APU SHIFTS TO HIGH SPEED 
(113%) AS SECONDARY VALVE TAKES OVER. CRITICALITY IS 3/1R DUE TO 
REDUNDAN CY OF SPEED CONTROL CIRCUITS AND AFU'S.Z - ::: 1Z " 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-284 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/05/86 

APU 

383 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: CONTROLLER PRIMARY SPEED CONTROL 

FAILURE MODE: OUTPUT FAILED ON, SPURIOUS OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) SPEED CONTROL 

4) PRIMARY SPEED CONTROL 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/1R 

TAL: 

1/1 

ONORBIT: 

2/1R 

AOA: 

1/1 

DEORBIT: 

2/1R 

ATO: 

1/1 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: AV BAY 4 

,5,6 



PART NUMBER: MC201-0001 



CAUSES: MANUFACTURING 

DEFECT, 

CONTAMINATION 



EFFECTS/RATIONALE : 

PRIMARY FUEL VALVE CLOSES, SHUTTING DOWN APU. CRITICALITY IS 
2/1R DUE TO APU REDUNDANCY. 

ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-285 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

AFU 

384 


HIGHEST CRITICALITY HDW/FUNC 
PLIGHT: 2/1R 

ABORT: 1/1 


ITEM: CONTROLLER SECONDARY SPEED CONTROL 

FAILURE MODE: LOSS OF OUTPUT, INTERMITTENT OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) SPEED CONTROL 

4) SECONDARY SPEED CONTROL 

5) 

6 ) 

7) 

8 ) 

9) 



CRITICALITIES 

FLIGHT PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/1R 

TAL: 

ONORBIT: 

2/1R 

AOA: 

DEORBIT: 

2/1R 

ATO: 

LANDING/SAFING: 

2/1R 



HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY SCREENS: A [ 1 ] B ( P ] 


C[P] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 

EFFECTS/RATIONALE : 

SECONDARY FUEL VALVE CLOSES, SHUTTING DOWN APU. CRITICALITY IS 
2/1R DUE TO APU REDUNDANCY. 

ABORT: CRITICALITY IS 1/1 FOR ENGINE-OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-286 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

APU 

385 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 2/1R 


ITEM: CONTROLLER SECONDARY SPEED CONTROL 

FAILURE MODE: OUTPUT FAILED ON, SPURIOUS OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) SPEED CONTROL 

4) SECONDARY SPEED CONTROL 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

2/1R 

RTLS: 

2/1R 

LIFTOFF: 

2/1R 

TAL: 

2/1R 

ONORBIT: 

2/1R 

AOA: 

2/1R 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A t i ] 

B [ P ] 

C [ F ] 


LOCATION: . AV BAY 4,5,6 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 

EFFECTS/RATIONALE : 

SECONDARY FUEL VALVE IS HELD OPEN. NO EFFECT UNLESS APU IS TAKEN 
TO HIGH SPEED - THEN, TURBINE WILL OVERSPEED AND COME APART. 
CRITICALITY IS 2/1R: 1 FAILURE AWAY FROM CRITICALITY 1. 

AUTO SHUTDOWN SHUTS FUEL TANK VALVES, BUT TURBINE CAN STILL 
OVERSPEED TO DESTRUCTION ON RESIDUAL FUEL LEFT IN LINES. 


REFERENCES : 


REPORT DATE 12/10/86 


C-287 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 11/06/86 

SUBSYSTEM: AFU 

MDAC ID: 386 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 2/1R 

ABORT: 1/1 


ITEM: CONTROLLER APU START LOGIC 

FAILURE MODE: LOSS OF OUTPUT, INTERMITTENT OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) APU START LOGIC 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


FLIGHT PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

2/1R 

2/1R 

2/1R 

2/1R 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY SCREENS: A [ 1 ] B[P] C[P] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 

EFFECTS/RATIONALE : 

APU WILL NOT OPERATE. CRITICALITY IS 2/1R DUE TO APU REDUNDANCY. 
ABORT: CRITICALITY IS 1/1 FOR ENGINE -OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL, i ' :£ ± 


REFERENCES: 


REPORT DATE 12/10/86 


C-288 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

APU 

387 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: CONTROLLER APU START LOGIC 

FAILURE MODE: OUTPUT FAILED ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) APU START LOGIC 

4 ) 

5 ) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING 

3/3 
: 3/3 

ATO: 

3/3 

REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 

LOCATION: AV BAY 4,5,6 

PART NUMBER: MC201-0001 



CAUSES: SHORT, MANUFACTURING DEFECT 



EFFECTS/RATIONALE : 

CONTROLLER ACTIVATION PRODUCES IMMEDIATE "START" SIGNAL. 
WILL START AS SOON AS FUEL TANK VALVES ARE OPENED. 


REFERENCES : 


REPORT DATE 12/10/86 C-289 


HDW/FUNC 

3/3 

3/3 


APU 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

APU 

388 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CONTROLLER "RE ADY" LOGIC 

FAILURE MODE: LOSS OF OUTPUT 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) "READY" LOGIC 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRIT ICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 

EFFECTS/RATIONALE : 

NO "APU READY TO START" SIGNAL TO TALKBACK LOGIC. TALKBACK WILL 
NOT SHOW "READY". APU WILL BE STARTED ANYWAY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-290 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

APU 

389 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CONTROLLER "READY" LOGIC 

FAILURE MODE: OUTPUT FAILED ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) "READY" LOGIC 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 

EFFECTS/RATIONALE : 

CONTROLLER WILL PRODUCE "APU READY TO START" SIGNAL AS SOON AS IT 
IS ACTIVATED. TALKBACK MAY NOT REFLECT APU'S TRUE STATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-291 



DATE: 

SUBSYSTEM: 
MDAC ID: 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


11/06/86 

APU 

390 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: 

FAILURE MODE: 


CONTROLLER GEARBOX PRESSURE CONTROL 
LOSS OF OUTPUT 


LEAD ANALYST: J. BARNES 


SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) GEARBOX PRESSURE CONTROL 

4) 

5) 

6 ) 

7) 

8 ) 

8 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/3 

AO A: 

2/1R 

DEORBIT: ' 

3/1R 

ATO: 

2/1R 

LANDING/SAFING: 

3/3 



INDANCY SCREENS: 

A [ 1 ] 

B t F ] 

C [ P ] 


LOCATION: 
PART NUMBER: 


AV BAY 4,5,6 
MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION . 

EFFECTS/RATIONALE : 

CONTROLLER WILL NOT PRODUCE COMMAND TO OPEN GEARBOX 
PRESSURIZATION VALVE. IF GEARBOX LOSES PRESSURE (BELOW 5.5 
PSIA), APU WILL ONLY START IN OVERRIDE; OIL PUMP MAY CAVITATE. 
CRITICALITY IS 3/1R: LOSS OF ONE APU IS ONE FAILURE AWAY (GEARBOX 
LEAK). ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, WHERE 
LOSS OF ONE APU CAN BE CRITICAL. 


REFERENCES : 


REPORT DATE 12/10/86 


C-292 


INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

APU 

391 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 2/1R 


ITEM: CONTROLLER GEARBOX PRESSURE CONTROL 

FAILURE MODE: OUTPUT FAILED ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) GEARBOX PRESSURE CONTROL 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/1R 

LIFTOFF: 

3/1R 

TAL: 

2/1R 

ONORBIT: 

3/1R 

AOA: 

2/1R 

DEORBIT: 

3/1R 

ATO: 

2/1R 

LANDING/S AFING: 

3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC2 01-00 01 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION (SHORT) 

EFFECTS/RATIONALE : 

GEARBOX PRESSURIZATION VALVE IS HELD OPEN; GN2 BOTTLE DUMPS INTO 
GEARBOX. IF GEARBOX LEAKS, APU CAN BE LOST. CRITICALITY IS 
3/1R: 1 FAILURE AWAY FROM LOSS OF ONE APU. 

ABORT: CRITICALITY IS 2/1R FOR ENGINE-OUT ABORTS, WHERE LOSS OF 
ONE APU CAN BE CRITICAL. 


REFERENCES: 


REPORT DATE 12/10/86 


C-293 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 

ITEM: 


11/06/86 

AFU 

392 


HIGHEST CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/1R 

2/1R 


CONTROLLER GG BED HEATER CONTROL 


FAILURE MODE: LOSS OF HEATER "ON" SIGNAL 

LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

CONTROLLER 
HEATER CONTROL 
GG BED HEATER CONTROL 


2 ) 

3) 

4) 

5) 

6 ) 
7) 
3 ) 
9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/1R 

AOA: 

3/3 

DEORBIT: 

2/1R 

ATO: 

2/1R 

LANDING/SAFING: 

2/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: 
PART NUMBER: 


AV BAY 4,5,6 
MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 


EFFECTS/RATIONALE : 

LOSS OF GAS GENERATOR BED HEATERS. APU CANNOT BE STARTED SAFELY 
DUE TO POSSIBLE FUEL DETONATION. CRITICALITY IS 2/1R DUE TO APU 
REDUNDANCY. - ' • : f 


REFERENCES: 


REPORT DATE 12/10/86 


C-294 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

AFU 

393 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CONTROLLER GG BED HEATER CONTROL 

FAILURE MODE: HEATER "ON" SIGNAL FAILED ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 


1) 

APU 




2) 

CONTROLLER 




3) 

HEATER CONTROL 




4) 

GG BED HEATER CONTROL 



5) 





6) 





7) 





8) 





9) 







CRITICALITIES 



FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 


LIFTOFF: 

3/3 

TAL: 

3/3 


ONORBIT: 

3/3 

AOA: 

3/3 


DEORBIT: 

3/3 

ATO: 

3/3 


LANDING/SAFING: 

3/3 




REDUNDANCY SCREENS: A [NA ] B [NA ] C [NA ] 

LOCATION: AV BAY 4,5,6 

PART NUMBER: MC2 01-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION (SHORT) 

EFFECTS/RATIONALE : 

ONE OF TWO GAS GENERATOR BED HEATERS IS FAILED ON WHILE ACTIVE, 
BUT CAN BE DEACTIVATED. 


REFERENCES: 


REPORT DATE 12/10/86 


C-295 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

APU 

394 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: CONTROLLER GG/FUEL PUMP HEATER INHIBIT 

FAILURE MODE: LOSS OF HEATER "INHIBIT" SIGNAL 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN 
1) APU 


HIERARCHY: 


2 ) 

3) 

4) 

5) 

6 ) 

7) 

8 ) 
9 ) 


CONTROLLER 

HEATER CONTROL 

GG/FUEL PUMP HEATER INHIBIT 


CRIT ICA LITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/S AFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 

EFFECTS/RATIONALE : 

HEATER WILL ACTIVATE WHILE APU IS RUNNING, IF HEATER SWITCH IS 
ON, BUT THERMOSTATIC CONTROL WILL PREVENT HEATING WHILE GAS 
GENERATOR BED IS ABOVE 425 F. APU WILL NOT START IN NORMAL MODE 
IF HEATER SWITCH IS TURNED ON-MUST BE STARTED IN OVERRIDE MODE. 
CRITICALITY IS 3/1R DUE TO LOSS OF ONE APU START MODE AND APU 
REDUNDANCY. 


REFERENCES : 


REPORT DATE 12/10/86 


C-296 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

APU 

395 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CONTROLLER GG/FUEL PUMP HEATER INHIBIT 

FAILURE MODE: HEATER "INHIBIT" SIGNAL FAILED ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) HEATER CONTROL 

4) GG/FUEL PUMP HEATER INHIBIT 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION (SHORT) 


EFFECTS/RATIONALE : 

FAI LED-ON SIGNAL WILL BE LOST ON ORBIT WHEN CONTROLLER IS POWERED 
OFF. ONE HEATER WILL BE INHIBITED WHEN CONTROLLER IS ACTIVATED 
FOR DEORBIT, BUT APU IS ACTIVATED SOON AFTER. NO EFFECT. 


REFERENCES : 


REPORT DATE 12/10/86 


C-297 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

AFU 

396 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: CONTROLLER START/OVERRIDE LOGIC 

FAIIURE MODE: LOSS OF START/OVERRIDE COMMAND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) START/OVERRIDE LOGIC 

4 ) 

5 ) 

6 ) 

7 ) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/1R 

ATO: 

3/1R 

LANDING/SAFING: 

3/1R 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [NA ] 

c [ p ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC201-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 
EFFECTS/RATIONALE : • 

APU WILL NOT START IN OVERRIDE MODE. NO EFFECT UNLESS ANOTHER 
FAILURE FORCES OVERRIDE START ATTEMPT. CRITICALITY IS 3/1R: 1 
FAILURE AWAY FROM LOSS OF ONE APU. 


REFERENCES: 


REPORT DATE 12/10/86 


C-298 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

APU 

397 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CONTROLLER START/OVERRIDE LOGIC 

FAILURE MODE: START/OVERRIDE COMMAND FAILED ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) START/OVERRIDE LOGIC 

4) 

5) 

6 ) 

7) 

8 ) 

9) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 - 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING 

: 3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 

LOCATION: AV BAY 

4,5,6 



PART NUMBER: MC201-0001 




CAUSES: MANUFACTURING DEFECT, CONTAMINATION (SHORT) 

EFFECTS/RATIONALE : 

APU WILL START AS SOON AS FUEL TANK VALVES ARE OPENED (IF 
CONTROLLER IS ON). NO EFFECT. 


REFERENCES: 


REPORT DATE 12/10/86 


C-299 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

APU 

398 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/1R 

ABORT: 3/1R 


ITEM: CONTROLLER START/OVERRIDE LOGIC 

FAILURE MODE: LOSS OF INJECTOR COOLING VALVE COMMAND 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 


BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) START/OVERRIDE LOGIC 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRI TICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL:- 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

LANDlftG/SAFING: 

3/1R 

3/1R 

ATO: 

3/1R 

REDUNDANCY SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC2 01-0001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 


EFFECTS/RATIONALE : 

LOSS OF REDUNDANT COMMAND TO OPEN INJECTOR COOLING VALVE FOR ONE 
APU. CRITICALITY IS 3/1R FOR DEORBIT BEFORE APU COOLDOWN. APU 
STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES: 


REPORT DATE 12/10/86 


C-300 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

AFU 

399 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 1/1 

ABORT: 1/1 


ITEM: CONTROLLER START/OVERRIDE LOGIC 

FAILURE MODE: INJECTOR COOLING VALVE COMMAND FAILED ON 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) START/OVERRIDE LOGIC 

4) 

5) 

6 ) 

7) 

8 ) 

9) 

CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING 

: 3/3 



REDUNDANCY SCREENS: 

A [ 1 ] 

B [ P ] 

C [ F ] 

LOCATION: AV BAY 

4,5,6 



PART NUMBER: MC2 01-00 01 




CAUSES: MANUFACTURING DEFECT, CONTAMINATION (SHORT) 

EFFECTS/RATIONALE : 

WHEN CONTROLLER IS ACTIVATED, INJECTOR COOLING WATER WILL BE 
SPRAYED ON AFFECTED APU TO DEPLETION OR UNTIL CONTROLLER 
DEACTIVATION. NO EFFECT, EXCEPT LOSS OF HOT RESTART CAPABILITY. 
CRITICALITY IS 1/1 FOR DEORBIT BEFORE APU COOLDOWN. 

APU STARTED HOT CAN CAUSE FUEL TO DETONATE. 


REFERENCES : 


REPORT DATE 12/10/86 


C-301 



INDEPENDENT ORBITER ASSESSMENT 
ORBITER SUBSYSTEM ANALYSIS WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC ID: 


11/06/86 

APU 

400 


HIGHEST CRITICALITY HDW/FUNC 
FLIGHT: 3/3 

ABORT: 3/3 


ITEM: CONTROLLER BITE LOGIC 

FAILURE MODE: LOSS OF OUTPUT, ERRONEOUS OUTPUT 


LEAD ANALYST: J. BARNES SUBSYS LEAD: J. BARNES 

BREAKDOWN HIERARCHY: 

1) APU 

2) CONTROLLER 

3) BITE LOGIC 

4) 

5) 

6 ) 

7) 

8 ) 

9 ) 


CRITICALITIES 


FLIGHT PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 



REDUNDANCY SCREENS: 

A [NA ] 

B [NA ] 

C [NA ] 


LOCATION: AV BAY 4,5,6 

PART NUMBER: MC2 01-0 001 


CAUSES: MANUFACTURING DEFECT, CONTAMINATION 

EFFECTS/RATIONALE: 

CANNOT VERIFY CONTROLLER PRELAUNCH-POSSIBLE LAUNCH DELAY. BITE 
IS NOT USED AFTER LIFTOFF. 


REFERENCES : 


REPORT DATE 12/10/86 


C-302 



APPENDIX D 

POTENTIAL CRITICAL ITEMS 


MDAC-ID ITEM FAILURE MODE 


100 

GAS GENERATOR 

101 

GAS GENERATOR 

102 

TURBINE WHEEL 

103 

TURBINE WHEEL 

104 

EXHAUST DUCT 

105 

EXHAUST DUCT BELLOWS 

106 

GEARBOX 

112 

MAGNETIC PICKUP UNIT 

115 

FUEL TANK 

116 

FUEL TANK 

117 

FUEL TANK 

118 

FUEL TANK 

119 

FUEL TANK GN2 LINE 

120 

FUEL TANK GN2 FILL 
COUPLING 

123 

FUEL TANK ISOLATION 
VALVE 

125 

FUEL TANK ISOLATION 
VALVE 

126 

FUEL TANK ISOLATION 
VALVE 

127 

FUEL TANK ISOLATION 
VALVE 

128 

FUEL PUMP 

129 

FUEL PUMP 

130 

FUEL PUMP 

131 

FUEL PUMP BYPASS 
VALVE 

132 

FUEL PUMP BYPASS 
VALVE 

133 

FUEL PUMP RELIEF 
VALVE 

134 

FUEL PUMP RELIEF 
VALVE 

135 

FUEL PUMP RELIEF 
VALVE 

136 

FUEL PUMP FILTER 

137 

FUEL PUMP FILTER 

138 

FUEL PUMP DRAIN 
COUPLING 

140 

PRIMARY FUEL VALVE 

142 

PRIMARY FUEL VALVE 

143 

PRIMARY FUEL VALVE 

144 

PRIMARY FUEL VALVE 


NO OUTPUT OR LOW OUTPUT 
LEAK 

STRUCTURAL FAILURE 

BINDING 

LEAK 

LEAK 

LOSS OF OUTPUT 
NO OUTPUT, OR 
INTERMITTENT OUTPUT 
RUPTURE AT OPERATING 
PRESSURE 

EXTERNAL LEAK (FUEL) 
EXTERNAL LEAK ( GN2 ) 

INTERNAL LEAK THROUGH 

DIAPHRAGM 

LEAK 

EXTERNAL LEAK 

FAILS TO CLOSE (STUCK 
OPEN); INTERNAL LEAK 
BARRIER LEAK 

EXTERNAL LEAK 

FAILS TO RELIEVE 

INTERNAL LEAK PAST 
FACE SEAL 
EXTERNAL LEAK 
NO OUTPUT OR LOW OUTPUT 
FAILS OPEN 

FAILS CLOSED 

RELIEVES AT LOW 
PRESSURE/FAILS OPEN 
FAILS TO RELIEVE 

EXTERNAL LEAK 

BLOCKAGE 
FAILS OPEN-NO 
FILTERING 
EXTERNAL LEAK 

FAILS TO OPEN (STUCK CLOSED) 
INTERNAL LEAK TO BYPASS 
INTERNAL BARRIER LEAK 
EXTERNAL LEAK 


D-l 



MDAC-ID 

ITEM 

FAILURE MODE 

145 

SECONDARY FUEL VALVE 

FAILS TO OPEN; FAILS TO 
REMAIN OPEN 

147 

SECONDARY FUEL VALVE 

FAILS MID-POSITION 

149 

SECONDARY FUEL VALVE 

INTERNAL LEAK TO BYPASS 

150 

SECONDARY FUEL VALVE 

EXTERNAL LEAK 

151 

FUEL LINE-UPSTREAM OF 
TANK ISOL 

EXTERNAL LEAK 

152 

FUEL LINE-DOWNSTREAM OF 
TANK ISOL — 

EXTERNAL LEAK 

153 

FUEL TANK HYDRAZINE FILL 
COUPLING 

EXTERNAL LEAK 

155 

FUEL LINE TEST POINT 
COUPLING 

EXTERNAL LEAK 

156 

FUEL LINE TEST POINT 
COUPLING 

FAILS CLOSED 

157 

FUEL LINE FLEX HOSE 

LEAK 

158 

FUEL LINE HIGH POINT 
BLEED COUPLING 

EXTERNAL LEAK 

170 

FUEL PUMP SEAL CAVITY 

FAIL CLOSED 


DRAIN LINE 


174 

FUEL IN-LINE FILTER 

BLOCKAGE 

175 

FUEL IN-LINE FILTER 

EXTERNAL LEAK 

176 

FUEL IN-LINE FILTER 

FAILS OPEN-NO FILTERING 

177 

SEAL CAVITY DRAIN LINE 

EXTERNAL LEAK 

178 

SEAL CAVITY DRAIN FLEX 
HOSE 

EXTERNAL LEAK 

180 

SEAL CAVITY DRAIN RELIEF 
VALVE 

LOW CRACKING PRESSURE 

181 

SEAL CAVITY DRAIN RELIEF 
VALVE 

FAILS TO RESEAT (FAILS 
OPEN) , LEAK 

183 

SEAL CAVITY DRAIN RELIEF 
VALVE 

EXTERNAL LEAK 

184 

SEAL CAVITY DRAIN CATCH 
BOTTLE 

LEAK 

185 

SEAL CAVITY DRAIN CATCH 
BOTTLE DRAIN VALVE 

LEAK 

187 

LUBE OIL PUMP 

NO OUTPUT OR LOW OUTPUT 

189 

GEARBOX GN2 BOTTLE 

RUPTURE AT OPERATING 
PRESSURE 

195 

GEARBOX PRESSURIZATION 
VALVE 

EXTERNAL LEAK 

197 

LUBE OIL LINES 

LEAK 

198 

LUBE OIL LINE FLEX HOSES 

LEAK 

199 

GEARBOX FILL COUPLING 

EXTERNAL LEAK 

201 

GEARBOX HIGH POINT VENT 
COUPLING 

EXTERNAL LEAK 

203 

GEARBOX CHIP DETECTOR 

EXTERNAL LEAK 

204 

GEARBOX LOW POINT DRAIN 
COUPLING •• • 

EXTERNAL LEAK 

206 

GEARBOX HIGH POINT DRAIN 
COUPLING 

EXTERNAL LEAK 

208 

WSB DRAIN COUPLING 

EXTERNAL LEAK 


D-2 



MDAC-ID 

214 

215 

216 

217 

219 

220 
221 
222 

223 

224 

225 

226 

228 

229 

231 

233 

234 

235 

237 

238 

239 
246 

248 

249 
251 

254 

255 

256 


ITEM 

LUBE OIL FILTER 

LUBE OIL FILTER 

OIL FILTER BYPASS RELIEF 

VALVE 

OIL FILTER BYPASS RELIEF 
VALVE 

GEARBOX BYPASS RELIEF 
VALVE 

LUBE OIL ACCUMULATOR 
(ADD-ON) 

LUBE OIL ACCUMULATOR 
(ADD-ON) 

LUBE OIL ACCUMULATOR 
( INTEGRAL ) 

LUBE OIL ACCUMULATOR 
( INTEGRAL ) 

INJECTOR COOLING VALVE 
INJECTOR COOLING VALVE 
INJECTOR COOLING VALVE 

INJECTOR COOLING VALVE 
INJECTOR COOLING WATER 
TANK 

INJECTOR COOLING GN2 
FILL COUPLING 
INJECTOR COOLING WATER 
LINES (MANIFOLD) 

INJECTOR COOLING WATER 
LINES (MANIFOLD) 
INJECTOR COOLING WATER 
FILL COUPLING 
INJECTOR COOLING WATER 
LINE-APU X 

INJECTOR COOLING WATER 
LINE-APU X 

INJECTOR COOLING WATER 

LINE FLEX HOSE 

FUEL PUMP/GGVM COOLING 

RELIEF VALVE 

FUEL PUMP/GGVM COOLING 

RELIEF VALVE 

FUEL PUMP/GGVM COOLING 

GN2 LINE 

FUEL PUMP/GGVM COOLING 
VALVE 

FUEL PUMP/GGVM COOLING 
WATER TANK 

FUEL PUMP/GGVM COOLING 
WATER TANK 

FUEL PUMP/GGVM COOLING 
WATER LINES - BETWEEN 
TANK AND TANK VALVES 


FAILURE MODE 

FAILS OPEN/NO FILTERING 
EXTERNAL LEAK 
FAILS CLOSED 

FAILS TO CLOSE (STUCK OPEN), 
OR FAILS OPEN, OR LEAKS 
FAILS OPEN, OR FAILS TO 
CLOSE, OR LEAKS 
EXTERNAL LEAK 

INTERNAL LEAK 

EXTERNAL LEAK 

INTERNAL LEAK 

EXTERNAL LEAK 
INTERNAL LEAK 
FAIL TO OPEN, FAIL TO 
REMAIN OPEN 
BARRIER FAILURE 
EXTERNAL LEAK (WATER 
OR N2 ) 

EXTERNAL LEAK 
EXTERNAL LEAK 
BLOCKAGE 
EXTERNAL LEAK 
EXTERNAL LEAK 
BLOCKAGE 
LEAK 

FAIL CLOSED; RELIEVE OVER 
SPEC 

EXTERNAL LEAK 

EXTERNAL LEAK 

FAIL OPEN ( FAIL TO CLOSE ) , 
INTERNAL LEAK 
EXTERNAL LEAK (WATER OR 
N2 ) 

DIAPHRAGM LEAK 
LEAK 


D-3 



MDAC-ID 

ITEM 

FAILURE MODE 

257 

FUEL PUMP/GGVM COOLING 
WATER LINES - BETWEEN 
TANK AND TANK VALVES 

BLOCKAGE 

258 

FUEL PUMP/GGVM COOLING 
WATER FILL COUPLING 

LEAK 

260 

FUEL PUMP/GGVM COOLING 
WATER LINES - BETWEEN 
TANK VALVE AND APU 

LEAK 

264 

FUEL PUMP/GGVM COOLING 
WATER TANK VALVE 

FAIL TO OPEN; FAIL TO 
REMAIN OPEN 

266 

FUEL PUMP/GGVM COOLING 
WATER TANK VALVE 

INTERNAL BARRIER LEAK 

267 

FUEL PUMP/GGVM COOLING 
WATER TANK VALVE 

EXTERNAL LEAK 

276 

EXHAUST PLENUM HOUSING 

EXTERNAL LEAK 

277 

EXHAUST PLENUM HOUSING 

CRACKING 

278 

EXHAUST PLENUM HOUSING 

INTERNAL LEAK 

279 

GEARBOX HOUSING 

LEAK 

280 

"APU CONTROL" SWITCH 

FAIL TO CLOSE 

281 

"APU CONTROL" SWITCH 

FAIL TO REMAIN CLOSED 

282 

"APU CONTROL" SWITCH 

FAIL TO OPEN (STUCK IN 
"START /RUN" ) 

286 

APU CONTROL CIRCUIT 
SWITCH POWER FUSE 

FAIL OPEN 

287 

APU CONTROL CIRCUIT 
START CONTROL INPUT DIODE 

FAIL OPEN, SHORT TO 
GROUND 

288 

"APU CNTLR PWR " SWITCH 

FAIL TO CLOSE 

289 

"APU CNTLR PWR" SWITCH 

FAIL TO REMAIN CLOSED 

306 

"APU AUTO SHUTDOWN" 
SWITCH 

FAIL TO REMAIN CLOSED 

314 

FUEL TANK VALVE SWITCH 

FAIL TO CLOSE # 

315 

FUEL TANK VALVE SWITCH 

FAIL TO REMAIN CLOSED 

316 

FUEL TANK VALVE SWITCH 

FAIL TO OPEN 

317 

FUEL TANK VALVE SWITCH 

INADVERTENT OPERATION 

319 

FUEL TANK VALVE CIRCUIT 
DRIVER 

FAIL ON 

322 

FUEL'' TANK VALVE SWITCH 
POWER FUSE 

FAIL OPEN 

323 

FUEL TANK VALVE SWITCH 
OUTPUT DIODE 

FAIL OPEN, OR SHORT TO 
GROUND 

326 

"PUMP/VLV COOL" SWITCH 

FAIL TO CLOSE, FAIL TO 
REMAIN CLOSED 

328 

"PUMP/VLV COOL" SWITCH 

INADVERTENT OPERATION 

329 

" PUMP / VL V COOL" SWITCH ' 
POWER CIRCUIT POWER FUSE 

FAIL OPEN 

330 

FUEL PUMP/GGVM COOLING 
CONTROL CIRCUIT POWER 
FUSE 1 

FAIL OPEN 

331 

FUEL PUMP/GGVM COOLING 
CONTROL CIRCUIT POWER 
INPUT DIODE 

FAIL OPEN 
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332 

FUEL PUMP/GGVM COOLING 
CONTROL CIRCUIT POWER 
INPUT DIODE 

SHORT TO GROUND 

333 

FUEL PUMP/GGVM COOLING 
CONTROL CIRCUIT INPUT 
RESISTOR 

FAIL OPEN, OR HIGH 
RESISTANCE 

334 

FUEL PUMP/GGVM COOLING 
CONTROL CIRCUIT INPUT 
RESISTOR 

INTERNAL SHORT, LOW 
RESISTANCE, OR SHORT 
TO GROUND 

335 

FUEL PUMP/GGVM COOLING 
CONTROL CIRCUIT POWER 
INPUT DRIVER 

FAIL OFF 

337 

FUEL PUMP/GGVM COOLING 
CONTROL CIRCUIT POWER 
INPUT DRIVER 

SHORT TO GROUND 

339 

FUEL PUMP/GGVM COOLING 
VALVE POWER DIODE 

FAIL OPEN 

340 

FUEL PUMP/GGVM COOLING 
VALVE POWER DIODE 

SHORT TO GROUND 

343 

FUEL PUMP/GGVM COOLING 
TANK VALVE POWER FUSE 

FAIL OPEN 

344 

FUEL PUMP/GGVM COOLING 
TANK VALVE DRIVER 

FAIL OFF, OPEN CIRCUIT, 
SHORT TO GROUND 

346 

FUEL PUMP/GGVM COOLING 
THERMOSTAT 

FAIL OPEN 

351 

FUEL/H20 HEATER CONTROL 
CIRCUIT 

CIRCUIT DRIVER FAIL ON 

352 

FUEL/H20 HEATER CONTROL 
CIRCUIT 

FUEL PUMP DRAIN LINE 
HEATER THERMOSTAT INPUT 
DRIVER FAIL ON 

356 

GAS GEN/FUEL PUMP 
HEATER CONTROL CIRCUIT 

CIRCUIT DRIVER FAIL ON 

357 

"APU HEATER, LUBE OIL 
LINE" SWITCH 

FAIL TO CLOSE, FAIL TO 
REMAIN CLOSED 

376 

FUEL TEST LINE 
TEMPERATURE SENSOR 

NO OUTPUT, OR ERRONEOUS 
OUTPUT 

377 

FUEL PUMP SEAL CAVITY 
DRAIN LINE TEMPERATURE 
SENSOR 

NO OUTPUT, OR ERRONEOUS 
OUTPUT 

379 

CONTROLLER SAFETY 
MONITORING 

NO SHUTDOWN SIGNAL 

380 

CONTROLLER SAFETY 
MONITORING 

SPURIOUS SHUTDOWN 
SIGNAL 

383 

CONTROLLER PRIMARY 
SPEED CONTROL 

OUTPUT FAILED ON, 
SPURIOUS OUTPUT 

384 

CONTROLLER SECONDARY 
SPEED CONTROL 

LOSS OF OUTPUT, 
INTERMITTENT OUTPUT 

385 

CONTROLLER SECONDARY 
SPEED CONTROL 

OUTPUT FAILED ON, 
SPURIOUS OUTPUT 

386 

CONTROLLER APU START 
LOGIC 

LOSS OF OUTPUT, 
INTERMITTENT OUTPUT 
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390 

CONTROLLER GEARBOX 
PRESSURE CONTROL 

LOSS OF OUTPUT 

392 

CONTROLLER GG BED 
HEATER CONTROL 

LOSS OF HEATER "ON" 
SIGNAL 

398 

CONTROLLER START /OVER- 
RIDE LOGIC 

LOSS OF INJECTOR COOLING 
VALVE COMMAND 

399 

CONTROLLER START/OVER- 
RIDE LOGIC 

LOGIC INJECTOR COOLING 
VALVE COMMAND FAILED ON 
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